linux-kernel - Re: [PATCH v4] scsi: ufs: fix use-after free in init error and remove paths

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <173863996284.4118719.16500657324570528150.b4-ty@oracle.com>
Date: Mon,  3 Feb 2025 22:33:04 -0500
From: "Martin K. Petersen" <martin.petersen@...cle.com>
To: Alim Akhtar <alim.akhtar@...sung.com>, Avri Altman <avri.altman@....com>,
        Bart Van Assche <bvanassche@....org>,
        "James E.J. Bottomley" <James.Bottomley@...senPartnership.com>,
        Peter Griffin <peter.griffin@...aro.org>,
        Krzysztof Kozlowski <krzk@...nel.org>,
        Manivannan Sadhasivam <manivannan.sadhasivam@...aro.org>,
        Mike Snitzer <snitzer@...hat.com>, Jens Axboe <axboe@...nel.dk>,
        Ulf Hansson <ulf.hansson@...aro.org>,
        Satya Tangirala <satyat@...gle.com>,
        Eric Biggers <ebiggers@...gle.com>,
        André Draszik <andre.draszik@...aro.org>
Cc: "Martin K . Petersen" <martin.petersen@...cle.com>,
        Tudor Ambarus <tudor.ambarus@...aro.org>,
        Will McVicker <willmcvicker@...gle.com>, kernel-team@...roid.com,
        linux-scsi@...r.kernel.org, linux-kernel@...r.kernel.org,
        linux-samsung-soc@...r.kernel.org,
        linux-arm-kernel@...ts.infradead.org, linux-arm-msm@...r.kernel.org,
        stable@...r.kernel.org
Subject: Re: [PATCH v4] scsi: ufs: fix use-after free in init error and remove paths

On Fri, 24 Jan 2025 15:09:00 +0000, André Draszik wrote:

> devm_blk_crypto_profile_init() registers a cleanup handler to run when
> the associated (platform-) device is being released. For UFS, the
> crypto private data and pointers are stored as part of the ufs_hba's
> data structure 'struct ufs_hba::crypto_profile'. This structure is
> allocated as part of the underlying ufshcd and therefore Scsi_host
> allocation.
> 
> [...]

Applied to 6.14/scsi-fixes, thanks!

[1/1] scsi: ufs: fix use-after free in init error and remove paths
      https://git.kernel.org/mkp/scsi/c/f8fb2403ddeb

-- 
Martin K. Petersen	Oracle Linux Engineering