In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ACPI: bus: Introduce acpi_bus_get_primary_device()<\/p>\n
The function used for obtaining the first “physical” device for which
\nthe given ACPI one is the ACPI companion, acpi_get_first_physical_node(),
\nmay return a stale device pointer (mostly in theory) because
\nacpi_unbind_one() may run as a whole after dropping the ACPI device’s
\nphysical_node_lock in acpi_get_first_physical_node() and before it
\nreturns. The last reference to the “physical” device may be dropped
\nthen before the pointer to it is returned to the caller.<\/p>\n
If that happens and the acpi_get_first_physical_node() caller invokes
\nget_device() on the pointer obtained from it, which is done by the
\nmajority of its callers, a use-after-free will occur.<\/p>\n
To prepare for addressing this problem, introduce a new function for
\ngetting the first “physical” device associated with the given ACPI one
\n(the “primary physical device”) that will also reference count the
\ndevice in question before returning a pointer to it.<\/p>\n
Make that new function and acpi_get_first_physical_node() share the
\nphysical node list lookup code.<\/p>\n
No intentional functional impact.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ACPI: bus: Introduce acpi_bus_get_primary_device()<\/p>\n
The function used for obtaining the first “physical” device for which
\nthe given<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28515","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28515","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28515"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28515"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28515"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}