In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpmportunregisterpd() When unregister pd capabilitie in tcpm, KASAN will capture below double -free issue. The root cause is the same capabilitiy will be kfreed twice, the first time is kfreed by pdcapabilitiesrelease() and the second time is explicitly kfreed by tcpmportunregisterpd(). [ 3.988059] BUG: KASAN: double-free in tcpmportunregisterpd+0x1a4/0x3dc [ 3.995001] Free of addr ffff0008164d3000 by task kworker/u16:0/10 [ 4.001206] [ 4.002712] CPU: 2 PID: 10 Comm: kworker/u16:0 Not tainted 6.8.0-rc5-next-20240220-05616-g52728c567a55 #53 [ 4.012402] Hardware name: Freescale i.MX8QXP MEK (DT) [ 4.017569] Workqueue: eventsunbound deferredprobeworkfunc [ 4.023456] Call trace: [ 4.025920] dumpbacktrace+0x94/0xec [ 4.029629] showstack+0x18/0x24 [ 4.032974] dumpstacklvl+0x78/0x90 [ 4.036675] printreport+0xfc/0x5c0 [ 4.040289] kasanreportinvalidfree+0xa0/0xc0 [ 4.044937] _kasanslabfree+0x124/0x154 [ 4.049072] kfree+0xb4/0x1e8 [ 4.052069] tcpmportunregisterpd+0x1a4/0x3dc [ 4.056725] tcpmregisterport+0x1dd0/0x2558 [ 4.061121] tcpciregisterport+0x420/0x71c [ 4.065430] tcpciprobe+0x118/0x2e0 To fix the issue, this will remove kree() from tcpmportunregister_pd().
{ "binaries": [ { "binary_version": "6.8.0-35.35", "binary_name": "linux-buildinfo-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-buildinfo-6.8.0-35-generic-64k" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-cloud-tools-6.8.0-35" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-cloud-tools-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-cloud-tools-common" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-doc" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-headers-6.8.0-35" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-headers-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-headers-6.8.0-35-generic-64k" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-image-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-image-6.8.0-35-generic-dbgsym" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-image-unsigned-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-image-unsigned-6.8.0-35-generic-64k" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-image-unsigned-6.8.0-35-generic-64k-dbgsym" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-image-unsigned-6.8.0-35-generic-dbgsym" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-lib-rust-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-libc-dev" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-modules-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-modules-6.8.0-35-generic-64k" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-modules-extra-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-modules-ipu6-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-modules-iwlwifi-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-modules-usbio-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-source-6.8.0" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-tools-6.8.0-35" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-tools-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-tools-6.8.0-35-generic-64k" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-tools-common" }, { "binary_version": "6.8.0-35.35", "binary_name": "linux-tools-host" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1009.9", "binary_name": "linux-aws-cloud-tools-6.8.0-1009" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-aws-headers-6.8.0-1009" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-aws-tools-6.8.0-1009" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-buildinfo-6.8.0-1009-aws" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-cloud-tools-6.8.0-1009-aws" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-headers-6.8.0-1009-aws" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-image-unsigned-6.8.0-1009-aws" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-image-unsigned-6.8.0-1009-aws-dbgsym" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-modules-6.8.0-1009-aws" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-modules-extra-6.8.0-1009-aws" }, { "binary_version": "6.8.0-1009.9", "binary_name": "linux-tools-6.8.0-1009-aws" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1008.8", "binary_name": "linux-azure-cloud-tools-6.8.0-1008" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-azure-headers-6.8.0-1008" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-azure-tools-6.8.0-1008" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-buildinfo-6.8.0-1008-azure" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-cloud-tools-6.8.0-1008-azure" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-headers-6.8.0-1008-azure" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-image-unsigned-6.8.0-1008-azure" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-image-unsigned-6.8.0-1008-azure-dbgsym" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-modules-6.8.0-1008-azure" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-modules-extra-6.8.0-1008-azure" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-modules-iwlwifi-6.8.0-1008-azure" }, { "binary_version": "6.8.0-1008.8", "binary_name": "linux-tools-6.8.0-1008-azure" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1008.9", "binary_name": "linux-buildinfo-6.8.0-1008-gcp" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-gcp-headers-6.8.0-1008" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-gcp-tools-6.8.0-1008" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-headers-6.8.0-1008-gcp" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-image-unsigned-6.8.0-1008-gcp" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-image-unsigned-6.8.0-1008-gcp-dbgsym" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-modules-6.8.0-1008-gcp" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-modules-extra-6.8.0-1008-gcp" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-modules-iwlwifi-6.8.0-1008-gcp" }, { "binary_version": "6.8.0-1008.9", "binary_name": "linux-tools-6.8.0-1008-gcp" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1004.7", "binary_name": "linux-buildinfo-6.8.0-1004-gke" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-gke-headers-6.8.0-1004" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-gke-tools-6.8.0-1004" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-headers-6.8.0-1004-gke" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-image-unsigned-6.8.0-1004-gke" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-image-unsigned-6.8.0-1004-gke-dbgsym" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-modules-6.8.0-1004-gke" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-modules-extra-6.8.0-1004-gke" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-modules-iwlwifi-6.8.0-1004-gke" }, { "binary_version": "6.8.0-1004.7", "binary_name": "linux-tools-6.8.0-1004-gke" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1006.6", "binary_name": "linux-buildinfo-6.8.0-1006-ibm" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-headers-6.8.0-1006-ibm" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-ibm-cloud-tools-common" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-ibm-headers-6.8.0-1006" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-ibm-source-6.8.0" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-ibm-tools-6.8.0-1006" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-ibm" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-ibm-dbgsym" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-6.8.0-1006-ibm" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-extra-6.8.0-1006-ibm" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-iwlwifi-6.8.0-1006-ibm" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-tools-6.8.0-1006-ibm" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-buildinfo-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-buildinfo-6.8.0-35-lowlatency-64k" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-cloud-tools-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-headers-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-headers-6.8.0-35-lowlatency-64k" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency-64k" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency-64k-dbgsym" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-image-unsigned-6.8.0-35-lowlatency-dbgsym" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-lowlatency-cloud-tools-6.8.0-35" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-lowlatency-cloud-tools-common" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-lowlatency-headers-6.8.0-35" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-lowlatency-lib-rust-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-lowlatency-tools-6.8.0-35" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-lowlatency-tools-common" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-lowlatency-tools-host" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-modules-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-modules-6.8.0-35-lowlatency-64k" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-modules-iwlwifi-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-tools-6.8.0-35-lowlatency" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-tools-6.8.0-35-lowlatency-64k" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1006.6", "binary_name": "linux-buildinfo-6.8.0-1006-oem" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-headers-6.8.0-1006-oem" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-oem" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-oem-dbgsym" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-6.8.0-1006-oem" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-ipu6-6.8.0-1006-oem" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-iwlwifi-6.8.0-1006-oem" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-usbio-6.8.0-1006-oem" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-oem-6.8-headers-6.8.0-1006" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-oem-6.8-tools-6.8.0-1006" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-tools-6.8.0-1006-oem" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1006.6", "binary_name": "linux-buildinfo-6.8.0-1006-oracle" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-buildinfo-6.8.0-1006-oracle-64k" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-headers-6.8.0-1006-oracle" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-headers-6.8.0-1006-oracle-64k" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-oracle" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-oracle-64k" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-oracle-64k-dbgsym" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-image-unsigned-6.8.0-1006-oracle-dbgsym" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-6.8.0-1006-oracle" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-6.8.0-1006-oracle-64k" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-extra-6.8.0-1006-oracle" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-extra-6.8.0-1006-oracle-64k" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-modules-iwlwifi-6.8.0-1006-oracle" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-oracle-headers-6.8.0-1006" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-oracle-tools-6.8.0-1006" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-tools-6.8.0-1006-oracle" }, { "binary_version": "6.8.0-1006.6", "binary_name": "linux-tools-6.8.0-1006-oracle-64k" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-1005.5", "binary_name": "linux-buildinfo-6.8.0-1005-raspi" }, { "binary_version": "6.8.0-1005.5", "binary_name": "linux-headers-6.8.0-1005-raspi" }, { "binary_version": "6.8.0-1005.5", "binary_name": "linux-image-6.8.0-1005-raspi" }, { "binary_version": "6.8.0-1005.5", "binary_name": "linux-image-6.8.0-1005-raspi-dbgsym" }, { "binary_version": "6.8.0-1005.5", "binary_name": "linux-modules-6.8.0-1005-raspi" }, { "binary_version": "6.8.0-1005.5", "binary_name": "linux-raspi-headers-6.8.0-1005" }, { "binary_version": "6.8.0-1005.5", "binary_name": "linux-raspi-tools-6.8.0-1005" }, { "binary_version": "6.8.0-1005.5", "binary_name": "linux-tools-6.8.0-1005-raspi" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-buildinfo-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-headers-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-image-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-image-6.8.0-35-generic-dbgsym" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-modules-6.8.0-35-generic" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-riscv-headers-6.8.0-35" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-riscv-tools-6.8.0-35" }, { "binary_version": "6.8.0-35.35.1", "binary_name": "linux-tools-6.8.0-35-generic" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.8.0-2004.4", "binary_name": "linux-buildinfo-6.8.0-2004-raspi-realtime" }, { "binary_version": "6.8.0-2004.4", "binary_name": "linux-headers-6.8.0-2004-raspi-realtime" }, { "binary_version": "6.8.0-2004.4", "binary_name": "linux-image-6.8.0-2004-raspi-realtime" }, { "binary_version": "6.8.0-2004.4", "binary_name": "linux-image-6.8.0-2004-raspi-realtime-dbgsym" }, { "binary_version": "6.8.0-2004.4", "binary_name": "linux-modules-6.8.0-2004-raspi-realtime" }, { "binary_version": "6.8.0-2004.4", "binary_name": "linux-raspi-realtime-headers-6.8.0-2004" }, { "binary_version": "6.8.0-2004.4", "binary_name": "linux-raspi-realtime-tools-6.8.0-2004" }, { "binary_version": "6.8.0-2004.4", "binary_name": "linux-tools-6.8.0-2004-raspi-realtime" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "6.8.1-1002.2", "binary_name": "linux-buildinfo-6.8.1-1002-realtime" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-cloud-tools-6.8.1-1002-realtime" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-headers-6.8.1-1002-realtime" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-image-unsigned-6.8.1-1002-realtime" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-image-unsigned-6.8.1-1002-realtime-dbgsym" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-modules-6.8.1-1002-realtime" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-modules-extra-6.8.1-1002-realtime" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-modules-iwlwifi-6.8.1-1002-realtime" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-realtime-cloud-tools-6.8.1-1002" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-realtime-headers-6.8.1-1002" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-realtime-tools-6.8.1-1002" }, { "binary_version": "6.8.1-1002.2", "binary_name": "linux-tools-6.8.1-1002-realtime" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }