In the Linux kernel, the following vulnerability has been resolved:
dm cache: Fix UAF in destroy()
Dm_cache also has the same UAF problem when dm_resume() and dm_destroy() are concurrent.
Therefore, cancelling timer again in destroy().
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 3.9 | 4.9.337 |
| linux / linux_kernel | 4.10 | 4.14.303 |
| linux / linux_kernel | 4.15 | 4.19.270 |
| linux / linux_kernel | 4.20 | 5.4.229 |
| linux / linux_kernel | 5.5 | 5.10.163 |
| linux / linux_kernel | 5.11 | 5.15.87 |
| linux / linux_kernel | 5.16 | 6.0.18 |
| linux / linux_kernel | 6.1 | 6.1.4 |