mbox series

[SRU,Focal,0/1] CVE-2023-23004

Message ID 20240215223644.89576-1-bethany.jamison@canonical.com
Headers show
Series CVE-2023-23004 | expand

Message

Bethany Jamison Feb. 15, 2024, 10:36 p.m. UTC 
[Impact]

In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c
misinterprets the get_sg_table return value (expects it to be NULL in the
error case, whereas it is actually an error pointer).

[Fix]

Focal: Clean cherry-pick.

[Test Case]

Compile and boot tested.

[Regression Potential]

Issues could occur for users using a pre-5.19 kernel when using the ARM 
Mali Display Processor driver, specifically when getting the sg_table.

Miaoqian Lin (1):
  malidp: Fix NULL vs IS_ERR() checking

 drivers/gpu/drm/arm/malidp_planes.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Stefan Bader Feb. 16, 2024, 9:07 a.m. UTC | #1 
On 15.02.24 23:36, Bethany Jamison wrote:
> [Impact]
> 
> In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c
> misinterprets the get_sg_table return value (expects it to be NULL in the
> error case, whereas it is actually an error pointer).
> 
> [Fix]
> 
> Focal: Clean cherry-pick.
> 
> [Test Case]
> 
> Compile and boot tested.
> 
> [Regression Potential]
> 
> Issues could occur for users using a pre-5.19 kernel when using the ARM
> Mali Display Processor driver, specifically when getting the sg_table.
> 
> Miaoqian Lin (1):
>    malidp: Fix NULL vs IS_ERR() checking
> 
>   drivers/gpu/drm/arm/malidp_planes.c | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
> 

Acked-by: Stefan Bader <stefan.bader@canonical.com>
Manuel Diewald Feb. 20, 2024, 5:08 p.m. UTC | #2 
On Thu, Feb 15, 2024 at 04:36:43PM -0600, Bethany Jamison wrote:
> [Impact]
> 
> In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c
> misinterprets the get_sg_table return value (expects it to be NULL in the
> error case, whereas it is actually an error pointer).
> 
> [Fix]
> 
> Focal: Clean cherry-pick.
> 
> [Test Case]
> 
> Compile and boot tested.
> 
> [Regression Potential]
> 
> Issues could occur for users using a pre-5.19 kernel when using the ARM 
> Mali Display Processor driver, specifically when getting the sg_table.
> 
> Miaoqian Lin (1):
>   malidp: Fix NULL vs IS_ERR() checking
> 
>  drivers/gpu/drm/arm/malidp_planes.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> -- 
> 2.34.1
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team

Acked-by: Manuel Diewald <manuel.diewald@canonical.com>
Andrei Gherzan Feb. 21, 2024, 11:14 a.m. UTC | #3 
On 24/02/15 04:36PM, Bethany Jamison wrote:
> [Impact]
> 
> In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c
> misinterprets the get_sg_table return value (expects it to be NULL in the
> error case, whereas it is actually an error pointer).
> 
> [Fix]
> 
> Focal: Clean cherry-pick.
> 
> [Test Case]
> 
> Compile and boot tested.
> 
> [Regression Potential]
> 
> Issues could occur for users using a pre-5.19 kernel when using the ARM 
> Mali Display Processor driver, specifically when getting the sg_table.
> 
> Miaoqian Lin (1):
>   malidp: Fix NULL vs IS_ERR() checking
> 
>  drivers/gpu/drm/arm/malidp_planes.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Acked-by: Andrei Gherzan <andrei.gherzan@canonical.com>
Roxana Nicolescu Feb. 23, 2024, 12:39 p.m. UTC | #4 
On 15/02/2024 23:36, Bethany Jamison wrote:
> [Impact]
>
> In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c
> misinterprets the get_sg_table return value (expects it to be NULL in the
> error case, whereas it is actually an error pointer).
>
> [Fix]
>
> Focal: Clean cherry-pick.
>
> [Test Case]
>
> Compile and boot tested.
>
> [Regression Potential]
>
> Issues could occur for users using a pre-5.19 kernel when using the ARM
> Mali Display Processor driver, specifically when getting the sg_table.
>
> Miaoqian Lin (1):
>    malidp: Fix NULL vs IS_ERR() checking
>
>   drivers/gpu/drm/arm/malidp_planes.c | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>
Applied to focal master-next branch. Thanks!