Skip to content
Heist/ feed
High

leds: trigger: Unregister sysfs attributes before calling deactivate()

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate() callback and freed by the deactivate() callback. Calling device_remove_groups() after calling deactivate() leaves a window where the sysfs attributes show/store functions could be called after deactivation and then operate on the just freed trigger-data. Move the device_remove_groups() call to before deactivate() to close this race window. This also makes the deactivation path properly do things in reverse order of the activation path which calls the activate() callback before calling device_add_groups().

Announced Source revision 1
Original source ↗

CVE-2024-43830

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-43830

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "c3b7a650c8717aa89df318364609c86cbc040156",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "d1415125b701ef13370e2761f691ec632a5eb93a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "09c1583f0e10c918855d6e7540a79461a353e5d6",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "3fb6a9d67cfd812a547ac73ec02e1077c26c640d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "734ba6437e80dfc780e9ee9d95f912392d12b5ea",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "cb8aa9d2a4c8a15d6a43ccf901ef3d094aa60374",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "0788a6f3523d3686a9eed5ea1e6fcce6841277b2",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a7e7a3156300a7e1982b03cc9cb8fb0c86434c49",
        "lessThan": "c0dc9adf9474ecb7106e60e5472577375aedaed3",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/leds/led-triggers.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.19"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.19",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.19.320",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.282",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.224",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.165",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.103",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.44",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.10.3",
        "versionType": "semver",
        "lessThanOrEqual": "6.10.*"
      },
      {
        "status": "unaffected",
        "version": "6.11",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/leds/led-triggers.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-43830

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#26688 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement