projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 801ab13) | patch
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
authorTomas Henzl <thenzl@redhat.com>
Thu, 2 Feb 2023 16:24:51 +0000 (17:24 +0100)
committerMartin K. Petersen <martin.petersen@oracle.com>
Tue, 21 Feb 2023 22:32:04 +0000 (17:32 -0500)
commit578797f0c8cbc2e3ec5fc0dab87087b4c7073686
treeb65fd78e99321280cd8f20f4f26e35252b11719dtree | snapshot
parent801ab13d50cf3d26170ee073ea8bb4eececb76abcommit | diff
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()

A fix for:

BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses]
Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013

When edev->components is zero, accessing edev->component[0] members is
wrong.

Link: https://lore.kernel.org/r/20230202162451.15346-5-thenzl@redhat.com
Cc: stable@vger.kernel.org
Signed-off-by: Tomas Henzl <thenzl@redhat.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/ses.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git