CVE-2024-46739 uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

2024-09-1807:12:00

Linux

www.cve.org

linux kernel

vulnerability

null pointer

uio_hv_generic

primary vm bus

rescind callback

device_obj

EPSS

Percentile

13.8%

JSON

In the Linux kernel, the following vulnerability has been resolved:

uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

For primary VM Bus channels, primary_channel pointer is always NULL. This
pointer is valid only for the secondary channels. Also, rescind callback
is meant for primary channels only.

Fix NULL pointer dereference by retrieving the device_obj from the parent
for the primary channel.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/uio/uio_hv_generic.c"
    ],
    "versions": [
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "3d414b64ecf6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "f38f46da80a2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "1d8e020e51ab",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "3005091cd537",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "2be373469be1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "de6946be9c8b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "928e399e84f4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca3cda6fcf1e",
        "lessThan": "fb1adbd7e50f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/uio/uio_hv_generic.c"
    ],
    "versions": [
      {
        "version": "4.16",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.16",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.322",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.284",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.226",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.167",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.110",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.51",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10.10",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.11",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]