Non évaluée
thermal: core: call put_device() only after device_register() fails
CVE-2023-53012
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- BellSoft Alpaquita BELL-CVE-2023-53012
- Debian DEBIAN-CVE-2023-53012 linux Corrigé dans: 6.1.11-1
- Ubuntu UBUNTU-CVE-2023-53012 linux-hwe-edge
Description d'origine La description telle que publiée par la source (souvent en anglais).
In the Linux kernel, the following vulnerability has been resolved:
thermal: core: call put_device() only after device_register() fails
put_device() shouldn't be called before a prior call to
device_register(). __thermal_cooling_device_register() doesn't follow
that properly and needs fixing. Also
thermal_cooling_device_destroy_sysfs() is getting called unnecessarily
on few error paths.
Fix all this by placing the calls at the right place.
Based on initial work done by Caleb Connolly.
Références
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org