CVE-2024-53068

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()

The scmi_dev->name is released prematurely in __scmi_device_destroy(),

which causes slab-use-after-free when accessing scmi_dev->name in

scmi_bus_notifier(). So move the release of scmi_dev->name to

scmi_device_release() to avoid slab-use-after-free.

| BUG: KASAN: slab-use-after-free in strncmp+0xe4/0xec

| Read of size 1 at addr ffffff80a482bcc0 by task swapper/0/1

|

| CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.6.38-debug #1

| Hardware name: Qualcomm Technologies, Inc. SA8775P Ride (DT)

| Call trace:

| dump_backtrace+0x94/0x114

| show_stack+0x18/0x24

| dump_stack_lvl+0x48/0x60

| print_report+0xf4/0x5b0

| kasan_report+0xa4/0xec

| __asan_report_load1_noabort+0x20/0x2c

| strncmp+0xe4/0xec

| scmi_bus_notifier+0x5c/0x54c

| notifier_call_chain+0xb4/0x31c

| blocking_notifier_call_chain+0x68/0x9c

|

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References