In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double ata_host_put() in ata_tport_add() In the error path in ata_tport_add(), when calling put_device(), ata_tport_release() is called, it will put the refcount of 'ap->host'. And then ata_host_put() is called again, the refcount is decreased to 0, ata_host_release() is called, all ports are freed and set to null. When unbinding the device after failure, ata_host_stop() is called to release the resources, it leads a null-ptr-deref(), because all the ports all freed and null. Unable to handle kern...
In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double ata_host_put() in ata_tport_add() In the error path in ata_tport_add(), when calling put_device(), ata_tport_release() is called, it will put the refcount of 'ap->host'. And then ata_host_put() is called again, the refcount is decreased to 0, ata_host_release() is called, all ports are freed and set to null. When unbinding the device after failure, ata_host_stop() is called to release the resources, it leads a null-ptr-deref(), because all the ports all freed and null. Unable to handle kern...
Linux Linux, linux kernel의 현재 전체 버전이 공식 영향 범위(Linux Linux, linux kernel >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 30e12e2be27ac6c4be2af4163c70db381364706f, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < bec9ded5404cb14e5f5470103d0973a2ff83d6a5, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < ac471468f7c16cda2525909946ca13ddbcd14000, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 377ff82c33c0cb74562a353361b64b33c09562cf, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 865a6da40ba092c18292ae5f6194756131293745, >= 2623c7a5f2799569d8bb05eb211da524a8144cb3 < 8c76310740807ade5ecdab5888f70ecb6d35732e, >= 4.17, >= 4.17 < 4.19.267, >= 4.20 < 5.4.225, >= 5.5 < 5.10.156, >= 5.11 < 5.15.80, >= 5.16 < 6.0.10, 6.1)에 포함되는지 확인합니다. OS를 선택하면 해당 OS의 제품·패키지·KB·APAR 확인 명령만 표시됩니다.
조치방안
구조화된 수정 버전 값(4.19.267, 5.4.225, 5.10.156, 5.15.80, 6.0.10)은 참고용입니다. 공급사 공식 보안 권고에서 제품·에디션·설치 방식별 수정 기준을 확인한 뒤 적용합니다.
조치 후 확인사항
패치 후 같은 명령으로 전체 버전을 다시 확인해 Linux Linux, linux kernel 4.19.267, 5.4.225, 5.10.156, 5.15.80, 6.0.10 기준을 충족하는지 확인합니다. 이어서 유형 미확정 관련 오류·공격 흔적이 새로 발생하지 않는지 확인합니다.
