In the Linux kernel, the following vulnerability has been resolved:
dma-buf: insert memory barrier before updating num_fences
smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.0 | 5.10.241 |
| linux / linux_kernel | 5.11 | 5.15.192 |
| linux / linux_kernel | 5.16 | 6.1.140 |
| linux / linux_kernel | 6.2 | 6.6.92 |
| linux / linux_kernel | 6.7 | 6.12.30 |
| linux / linux_kernel | 6.13 | 6.14.8 |
| linux / linux_kernel | 6.15-rc1 | 6.15-rc1.x |
| linux / linux_kernel | 6.15-rc2 | 6.15-rc2.x |
| linux / linux_kernel | 6.15-rc3 | 6.15-rc3.x |
| linux / linux_kernel | 6.15-rc4 | 6.15-rc4.x |
| linux / linux_kernel | 6.15-rc5 | 6.15-rc5.x |
| linux / linux_kernel | 6.15-rc6 | 6.15-rc6.x |
| debian / debian_linux | 11.0 | 11.0.x |