Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
created 4 weeks ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability. Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().

Affected products

Linux
  • ==5.9
  • <0975c42ed2a3bf32125a920e5d19194289126210
  • <1a634f464d6153dfa4d7e73a3d78236b65a64ee9
  • =<6.6.*
  • =<*
  • <94c87871b051d7ad758828a805215a2ec194512a
  • <5.9
  • =<6.18.*
  • =<6.12.*
  • <c7757db58957ac20cdec6ce575dbd44a6375664e
  • =<7.1.*
  • <56d2deb6448378118dbe68c4fbb3fbae5f65b18c