Description

In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: use _safe loop iterator to avoid a use after free The hash_for_each_possible() loop dereferences "eve_data" to get the next item on the list. However the loop frees eve_data so it leads to a use after free. Use hash_for_each_possible_safe() instead.

References 4

• git.kernel.org https://git.kernel.org/stable/c/256aace3a5d8c987183ba4832dffb36f48ea7d3b
• git.kernel.org https://git.kernel.org/stable/c/49fca83f6f3f0cafe5bf5b43e8ee81cf73c2d5e0
• git.kernel.org https://git.kernel.org/stable/c/c58da0ba3e5c86e51e2c1557afaf6f71e00c4533
• git.kernel.org https://git.kernel.org/stable/c/f16599e638073ef0b2828bb64f5e99138e9381b5

Remediation