linux-kernel - Re: [PATCH RE-SEND] media: dvb-core: Fix UAF due to refcount races at releasing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Wed, 2 Nov 2022 10:11:34 -0700
From:   Hyunwoo Kim <imv4bel@...il.com>
To:     Mauro Carvalho Chehab <mchehab@...nel.org>
Cc:     Takashi Iwai <tiwai@...e.de>, linux-media@...r.kernel.org,
        linux-kernel@...r.kernel.org, imv4bel@...il.com
Subject: Re: [PATCH RE-SEND] media: dvb-core: Fix UAF due to refcount races
 at releasing

Dear media people,

This CVE-2022-41218 has been a long time since the vulnerability details and PoC code were released:
https://www.openwall.com/lists/oss-security/2022/09/24/1

However, many distros are still vulnerable to this issue.

If you don't mind, could you please tell me the progress of this patch?


Best Regards,
Hyunwoo Kim.