In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ftrace ops [1]. It was found from vmcore that perf had registered two ops with the same content successively, both dynamic. After unregistering the second ops, a use-after-free occurred. In ftrace_shutdown(), when the second ops is unregistered, the FTRACE_UPDATE_CALLS command is not set because there is another enabled ops with the same content. Also, both ops are dynamic and the ftrace callback function is ftrace_ops_list_func, so the F...
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ftrace ops [1]. It was found from vmcore that perf had registered two ops with the same content successively, both dynamic. After unregistering the second ops, a use-after-free occurred. In ftrace_shutdown(), when the second ops is unregistered, the FTRACE_UPDATE_CALLS command is not set because there is another enabled ops with the same content. Also, both ops are dynamic and the ftrace callback function is ftrace_ops_list_func, so the F...
Linux Linux, linux kernel의 현재 전체 버전이 공식 영향 범위(Linux Linux, linux kernel >= edb096e00724f02db5f6ec7900f3bbd465c6c76f < ea5f2fd4640ecbb9df969bf8bb27733ae2183169, >= edb096e00724f02db5f6ec7900f3bbd465c6c76f < 88561a66777e7a2fe06638c6dcb22a9fae0b6733, >= edb096e00724f02db5f6ec7900f3bbd465c6c76f < cc1b9961a0ceb70f6ca4e2f4b8bb71c87c7a495c, >= edb096e00724f02db5f6ec7900f3bbd465c6c76f < 0e792b89e6800cd9cb4757a76a96f7ef3e8b6294, >= a60e407b961e818541ff7924afa8e51fbdb21a61, >= ed1bf4397d2219d4b9ec2d5517416ba102186650, >= 100553e197e2c41eccf9fa04b2be9cd11ae21215, >= 30d3c1c9c9dd31b3c3a5aa0f4f40f1e321c6c791, >= 4.1.45 < 4.2, >= 4.4.89 < 4.5, >= 4.9.52 < 4.10, >= 4.13.4 < 4.14, >= 4.14, >= 4.13.4 < 5.10.154, >= 5.11 < 5.15.78, >= 5.16 < 6.0.8, 6.1)에 포함되는지 확인합니다. OS를 선택하면 해당 OS의 제품·패키지·KB·APAR 확인 명령만 표시됩니다.
조치방안
구조화된 수정 버전 값(4.2, 4.5, 4.10, 5.10.154, 5.15.78, 6.0.8)은 참고용입니다. 공급사 공식 보안 권고에서 제품·에디션·설치 방식별 수정 기준을 확인한 뒤 적용합니다.
조치 후 확인사항
패치 후 같은 명령으로 전체 버전을 다시 확인해 Linux Linux, linux kernel 4.2, 4.5, 4.10, 5.10.154, 5.15.78, 6.0.8 기준을 충족하는지 확인합니다. 이어서 메모리 손상 관련 오류·공격 흔적이 새로 발생하지 않는지 확인합니다.
