APPLIED: [SRU][F][PATCH 0/1] CVE-2021-47188

[Stefan Bader]

On 09.08.24 19:50, Bethany Jamison wrote:
> [Impact]
> 
> scsi: ufs: core: Improve SCSI abort handling
> 
> The following has been observed on a test setup:
> 
> WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c
> Call trace:
>   ufshcd_queuecommand+0x468/0x65c
>   scsi_send_eh_cmnd+0x224/0x6a0
>   scsi_eh_test_devices+0x248/0x418
>   scsi_eh_ready_devs+0xc34/0xe58
>   scsi_error_handler+0x204/0x80c
>   kthread+0x150/0x1b4
>   ret_from_fork+0x10/0x30
> 
> That warning is triggered by the following statement:
> 
> 	WARN_ON(lrbp->cmd);
> 
> Fix this warning by clearing lrbp->cmd from the abort handler.
> 
> [Fix]
> 
> Noble:	not-affected
> Jammy:	not-affected
> Focal:	Backport from linux-5.15.y - the code structure has changed
> 	upstream and so I had to insert the fix changes into the
> 	appropriate section of the code
> Bionic:	fix sent to esm ML
> Xenial:	fix sent to esm ML
> Trusty:	won't fix
> 
> [Test Case]
> 
> Compile and boot tested
> 
> [Where problems could occur]
> 
> This fix affects those who use the Universal Flash Storage Host
> controller driver Core, an issue with this fix would be visible to
> the user via a PANIC_ON_OOPS which will trigger a reboot.
> 
> Bart Van Assche (1):
>    scsi: ufs: core: Improve SCSI abort handling
> 
>   drivers/scsi/ufs/ufshcd.c | 2 ++
>   1 file changed, 2 insertions(+)
> 

Applied to focal:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240816/7339e66e/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240816/7339e66e/attachment-0001.sig>