REDHAT-BUG-2265654: Use After Free
media: pvrusb2: fix use after free on context disconnection
Upon module load, a kthread is created targeting the pvr2contextthreadfunc function, which may call pvr2contextdestroy and thus call kfree() on the context object. However, that might happen before the usb hubevent handler is able to notify the driver. This patch adds a sanity check before the invalid read reported by syzbot, within the context disconnection call stack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2265654?
The severity of REDHAT-BUG-2265654 is classified as low.
What is the main issue described in REDHAT-BUG-2265654?
REDHAT-BUG-2265654 involves a use after free vulnerability in the pvrusb2 driver related to context disconnection.
How do I fix REDHAT-BUG-2265654?
To fix REDHAT-BUG-2265654, update the pvrusb2 driver with the latest security patches provided by Red Hat.
What software is affected by REDHAT-BUG-2265654?
The affected software for REDHAT-BUG-2265654 is the Linux pvrusb2 driver.
What type of vulnerability is REDHAT-BUG-2265654 classified as?
REDHAT-BUG-2265654 is classified as a Use After Free vulnerability.