In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
thermal: hwmon: Remove hwmon class device along with its parent<\/p>\n
The current code creates one hwmon device per thermal zone type and that
\ndevice is registered under the first thermal zone of the given type.<\/p>\n
That turns out to be problematic when the thermal zone holding the
\nhwmon device is removed.<\/p>\n
For example, say that there are two ACPI thermal zones on a system<\/p>\n
\/sys\/devices\/virtual\/thermal\/thermal_zone0\/
\n \/sys\/devices\/virtual\/thermal\/thermal_zone1\/<\/p>\n
The current code registers a hwmon class device for thermal_zone0 only:<\/p>\n
\/sys\/devices\/virtual\/thermal\/thermal_zone0\/hwmon0\/<\/p>\n
because the type is “acpitz” for both of them, but it adds a sysfs
\nattribute that belongs to thermal_zone1 under it:<\/p>\n
\/sys\/devices\/virtual\/thermal\/thermal_zone0\/hwmon0\/temp2_input<\/p>\n
There is also<\/p>\n
\/sys\/devices\/virtual\/thermal\/thermal_zone0\/hwmon0\/temp1_input<\/p>\n
which belongs to thermal_zone0.<\/p>\n
When thermal_zone0 is removed, say because the ACPI thermal driver is
\nunbound from the underlying platform device, thermal_remove_hwmon_sysfs()
\nskips the removal of hwmon0 because of the temp2_input attribute
\nbelonging to thermal_zone1 which effectively prevents thermal_zone0
\nremoval from making progress.<\/p>\n
Address this by making thermal_remove_hwmon_sysfs() remove the entire
\nhwmon class device interface for the given thermal zone type when the
\nthermal zone device holding it is removed.<\/p>\n
To prevent races with thermal_add_hwmon_sysfs() that may interfere
\nwith this, carry out the entire addition and removal of hwmon sysfs
\ninterfaces for thermal zones under thermal_hwmon_list_lock.<\/p>\n
Also adjust the layout of the labels in thermal_add_hwmon_sysfs() to
\nthe current kernel coding style to align with the new “unlock” label.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
thermal: hwmon: Remove hwmon class device along with its parent<\/p>\n
The current code creates one hwmon device per thermal zone type an<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25720","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25720","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25720"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25720"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25720"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}