Messages in this thread | | | Date | Wed, 1 Jun 2022 21:34:26 +0300 | From | Dan Carpenter <> | Subject | CVE-2022-1462: race condition vulnerability in drivers/tty/tty_buffers.c |
| |
Hi Greg, Jiri,
I searched lore.kernel.org and it seemed like CVE-2022-1462 might not have ever been reported to you? Here is the original email with the syzkaller reproducer.
https://seclists.org/oss-sec/2022/q2/155
The reporter proposed a fix, but it won't work. Smatch says that some of the callers are already holding the port->lock. For example, sci_dma_rx_complete() will deadlock.
regards, dan carpenter
| |