In the Linux kernel, the following vulnerability has been resolved: fbdev:
Fix invalid page access after closing deferred I/O devices When a fbdev
with deferred I/O is once opened and closed, the dirty pages still remain
queued in the pageref list, and eventually later those may be processed in
the delayed work. This may lead to a corruption of pages, hitting an Oops.
This patch makes sure to cancel the delayed work and clean up the pageref
list at closing the device for addressing the bug. A part of the cleanup
code is factored out as a new helper function that is called from the
common fb_release().
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 23.10 | noarch | linux | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 14.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 16.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws | < any | UNKNOWN |
git.kernel.org/linus/3efc61d95259956db25347e2a9562c3e54546e20 (6.2)
git.kernel.org/stable/c/3efc61d95259956db25347e2a9562c3e54546e20
git.kernel.org/stable/c/87b9802ca824fcee7915e717e9a60471af62e8e9
git.kernel.org/stable/c/f1d91f0e9d5a240a809698d7d9c5a538e7dcc149
launchpad.net/bugs/cve/CVE-2023-52731
nvd.nist.gov/vuln/detail/CVE-2023-52731
security-tracker.debian.org/tracker/CVE-2023-52731
www.cve.org/CVERecord?id=CVE-2023-52731