【OLK5.10】CVE-2023-3141

【严重程度】一般
【特性】驱动
【重现类型】有条件概率重现
【定位分析】【定位分析】
r592驱动创建的detect_timer绑定了r592_detect_timer定时器函数，卸载r592.ko时，卸载函数r592_remove没有删除该定时器，但是释放了dev->host。定时器函数r592_detect_timer中会访问dev->host->media_checker，如果dev->host释放时该函数正在并行执行，则会导致访问use-after-free。

Hi ***zhixiuzhou***, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at **[Here](https://gitee.com/openeuler/community/blob/master/en/sig-infrastructure/command.md)**.
If you have any questions, please contact the SIG: [Kernel](https://gitee.com/openeuler/community/tree/master/sig/Kernel), and any of the maintainers: @yangyingliang , @gatieme , @jiaoff , @LiuYongQiang0816 , @wangxiongfeng , @kevinzhu1 , @jentlestea , @lujialin2 , @xukuohai , @lengchao , @alvin-ling , @yuzenghui , @juntianlinux , @chenguangli , @gasonchen , @whoisxxx , @koulihong , @kailiu42 , @hanjun-guo , @woqidaideshi , @chiqijun , @wkfxxx , @thundertown , @guohaocs2c , @kylin-mayukun , @oskernel0719 , @liuxinux , @newbeats , @zhujianwei001 , @zhenpengzheng , @SuperSix173 , @colyli , @zhangyi089 , @htforge , @yuehaibing_planb , @haochengxie , @guzitao , @CTC-XiboWang , @Hongchen_Zhang , @chenwei_kernel , @x56Jason , @gouhao2022 , @duanqiangwen , @georgeguo , @mao-hongbo , @allen-shi , @zhangjialin11 , @stkid , @hellotcc , @hunan4222 , @kongzizaixian , @LiYihang226 , @young1c , @hucz , @wangboe2022 , @chenke1978 , @JerryHZ , @youngersun , @wsoydl , @sanglipeng , @zhang-changzhong , @jimmy_hero , @ygn-ndwd-official , @xiexiuqi , @zhengzengkai

GVP openEuler/kernel

内容风险标识

评论 (1)

GVPopenEuler/kernel

内容风险标识