In the Linux kernel, the following vulnerability has been resolved:
net: ll_temac: platform_get_resource replaced by wrong function
The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name.
This eventually ends up in platform_get_resource_byname in the call stack, where it causes a null pointer in strcmp.
if (type == resource_type(r) && !strcmp(r->name, name))
It should have been replaced with devm_platform_ioremap_resource.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.8.2 | 5.10.215 |
| linux / linux_kernel | 5.11 | 5.15.154 |
| linux / linux_kernel | 5.16 | 6.1.84 |
| linux / linux_kernel | 6.2 | 6.6.24 |
| linux / linux_kernel | 6.7 | 6.7.12 |
| linux / linux_kernel | 6.8 | 6.8.3 |
| linux / linux_kernel | 6.9-rc1 | 6.9-rc1.x |
| debian / debian_linux | 10.0 | 10.0.x |