In the Linux kernel, the following vulnerability has been resolved:
drm/meson: fix shutdown crash when component not probed
When main component is not probed, by example when the dw-hdmi module is
not loaded yet or in probe defer, the following crash appears on shutdown:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000038
…
pc : meson_drv_shutdown+0x24/0x50
lr : platform_drv_shutdown+0x20/0x30
…
Call trace:
meson_drv_shutdown+0x24/0x50
platform_drv_shutdown+0x20/0x30
device_shutdown+0x158/0x360
kernel_restart_prepare+0x38/0x48
kernel_restart+0x18/0x68
__do_sys_reboot+0x224/0x250
__arm64_sys_reboot+0x24/0x30
…
Simply check if the priv struct has been allocated before using it.
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/gpu/drm/meson/meson_drv.c"
],
"versions": [
{
"version": "8a5160cc8488",
"lessThan": "b4298d33c1fc",
"status": "affected",
"versionType": "git"
},
{
"version": "8fbbf2b38494",
"lessThan": "e256a0eb43e1",
"status": "affected",
"versionType": "git"
},
{
"version": "d2100ef32a8c",
"lessThan": "4ce2bf20b4a6",
"status": "affected",
"versionType": "git"
},
{
"version": "d4ec1ffbdaa8",
"lessThan": "d66083c0d6f5",
"status": "affected",
"versionType": "git"
},
{
"version": "fa0c16caf3d7",
"lessThan": "b4b91033a0b1",
"status": "affected",
"versionType": "git"
},
{
"version": "fa0c16caf3d7",
"lessThan": "7cfc4ea78fc1",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/gpu/drm/meson/meson_drv.c"
],
"versions": [
{
"version": "5.12",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.12",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.14.235",
"lessThanOrEqual": "4.14.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.193",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.124",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.42",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.12.9",
"lessThanOrEqual": "5.12.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.13",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/4ce2bf20b4a6e307e114847d60b2bf40a6a1fac0
git.kernel.org/stable/c/7cfc4ea78fc103ea51ecbacd9236abb5b1c490d2
git.kernel.org/stable/c/b4298d33c1fcce511ffe84d8d3de07e220300f9b
git.kernel.org/stable/c/b4b91033a0b11fe9ade58156cd9168f89f4a8c1a
git.kernel.org/stable/c/d66083c0d6f5125a4d982aa177dd71ab4cd3d212
git.kernel.org/stable/c/e256a0eb43e17209e347409a80805b1659398d68