Received-SPF: pass (google.com: domain of linux-kernel+bounces-199218-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99;
From: Siddh Raman Pant <siddh.raman.pant@oracle.com>
To: "gregkh@linuxfoundation.org" <gregkh@linuxfoundation.org>
CC: "cve@kernel.org" <cve@kernel.org>,
        "linux-cve-announce@vger.kernel.org"
	<linux-cve-announce@vger.kernel.org>,
        "linux-kernel@vger.kernel.org"
	<linux-kernel@vger.kernel.org>
Subject: Re: CVE-2024-35812: usb: cdc-wdm: close race between read and
 workqueue
Thread-Topic: CVE-2024-35812: usb: cdc-wdm: close race between read and
 workqueue
Thread-Index: AQHatbo9LM0Ae7ulWUiU4CwLaFYSig==
Date: Mon, 3 Jun 2024 13:30:46 +0000
Message-ID: <629491b984d5618417a29c8eaf595f03b9bbe822.camel@oracle.com>
In-Reply-To: <2024051741-CVE-2024-35812-c804@gregkh>
Accept-Language: en-US, en-IN
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?utf-8?B?OWNwdXRHejBaUWxidWdyU0JCazBheFppajNjQmlRNjJZRXlnRDY2R01sVWxo?=
 =?utf-8?B?eW9IbU1MYnFoem5JSTA3N2d0UTFVMHpMYWlEVGF0cVVyUkJpTUR1SE9VbGgz?=
 =?utf-8?B?WjkxejNGLzNIbC94bit4S0xBQmdVMTJuK2ljVWM5ZGNPSDZSdWV4UElUc1ly?=
 =?utf-8?B?QmZRdGZXWksxUmNWSzdNSTgzbTJyWGR4anBSM0t4RVJLQ1ZqQjNSYnlncVFs?=
 =?utf-8?B?alVvWXl0MkZKQi8vcHYvYlc1Y3UyUGlBYThGREtIVnNFZE5wVVNaakhFZzBC?=
 =?utf-8?B?T1JJbVNSTFBDM0ppdTg1aFBzckc4K3RFZ2VyQzFUTjVBT3JmUlV1YytVYjda?=
 =?utf-8?B?LzZaaWFYMDFUQ21INTlDM2FiR3NHYll6Tk93UEZLZ005RkZwd0FTLzUwYVJX?=
 =?utf-8?B?UUxSdU1XejRUVWsvRGVxdUM4d0c1bmpZVGZYbFBodklodTkzS0N0ODBCbllN?=
 =?utf-8?B?WFY5UTJZbXpsWHJickFMN3NZUVlnL0VuZ2hhNmt5R0xwYkEvTW4zYi8ybmxR?=
 =?utf-8?B?RFl2WGZoRjZNTk5pZm1zWG9jdW5rQ09HVlNMd2hnMHZZbTZ2YzJRQnE4c3BS?=
 =?utf-8?B?N1lYNGV5WHlsa0lFV05sNlcreWtOQkNNZ0ZvdkJsbEtIZXZXUnA1ZE5sSkdz?=
 =?utf-8?B?L1psUU53SjVXTzQrZmMzOWNKWFJsei9HTkU3QWcvQU9VanZVaFkvdG40Tm91?=
 =?utf-8?B?UUt5RUp3YlZGN2wwNWRYb1FyV1VpT1Z2NHovU1FIL1orZEtIUkRmTUpTZUxn?=
 =?utf-8?B?ek5SYW5scXh1d1h1Nk4vNDl1clJvNEhERlhPYjZDZUQvSTdpVHRVS0N1ekZi?=
 =?utf-8?B?NDJsbFBKeXpmM1R3V0tPSlNBWkwrT2gwdUdnVXA2M3R4RnV0TWp1NzVTSFZo?=
 =?utf-8?B?U0FCKzUrWGswUVlYYVkvR1h0R1RzSzBwWDhhZjNJRk5adXhpMUpLSGhBTE94?=
 =?utf-8?B?Mko4TXRCS1RUTFRJUUkzMkN1TXNCVjlFOEZKR0tZNm5rWlZZMEhpL29zNXdx?=
 =?utf-8?B?MmF1WlMrY3Q1bjF0TjV2NU9CZnFXRG9VWnRRY3hHWktyV3dHTlV0U0x5cTVl?=
 =?utf-8?B?ald2b2tNK1N1dkdiVDdsZ1lUOTFXcXI5M3JBMWV1aUViQXkrS1Fvek5mRmVS?=
 =?utf-8?B?WFl3djFMT0F4WXMwUU1INllHYWR5NEUwR2FuOTd2TEVmZmZOaDhtYy9Ua0t0?=
 =?utf-8?B?WkNXQS94WXRFSnNnSlJnZDBEWTFZWmNsN0JrMFhMMDVOYkxqNmFUODA1R1gv?=
 =?utf-8?B?dElXQ3l1NVl5Nlo2SzJrUDg4WXRaQjhBVk9GalZ2d0NsRHorTFFmT1RERk5a?=
 =?utf-8?B?a3VmRThsL1YvZGJKZUR0eG8rTUpRaTFaUUNNUXpRMm5VdTdwWHUxUC9OUzNG?=
 =?utf-8?B?UHBtM0NaK05keklWTDZYaFVZQzQ4dDB6em1IZjRHQ0h4RFBwYjcwdHBjR1lM?=
 =?utf-8?B?UEk1QlJmSVpYcENaR0ZETE90SlhCaHJaOTEyMlBHcmpWcldlWlNoMHQzZzNV?=
 =?utf-8?B?bE8wT0IrUlhIRW50Vm9CRVRUMkJnbDdNSEVGUndWejVSTG1EMCtTR0ZWVjdI?=
 =?utf-8?B?Mm02TUJqMTNjMW1pRkN5a09XekZCekZQbVVtc1RnRTljanp1cEJrK3o1dmZi?=
 =?utf-8?B?Q2htQ0tKK2VlbVVDanI1QjlpVXIrcnhNUFlZU2lBLzJRZERQdmtPbnZvRkVk?=
 =?utf-8?B?K091VWljRi90dDJ6bmh1UmFhZm1FVFhIR2tqVHRxeW5nNStvRlNvQS9DcnF3?=
 =?utf-8?B?ZDg3ZUxPejlsMjdWK1N1SVdCSy80eEw0SGpQZVlUeDg3UTdDaGl5REsrcVFj?=
 =?utf-8?B?REVDeHRWUWIwbzZFM2RUYm40NWR5SUlqOTBIWnhiNzhRckVNV2xwK2NUUkE4?=
 =?utf-8?B?T2NhcjB2Uy8xbWxsa3M2ZFNDZWpPVnZxalRkbWUwQnpNN3pKVmptOWNTY1Qv?=
 =?utf-8?B?WXJ6SkpKN2FtZUxoeTdMNEZxcm5OaHY4MEMwV0pVZTRFM05Va0lIUDlUdnVw?=
 =?utf-8?B?SWRrcHlBMThNeTVENEpIUU1oZ05Lell6UlUzaFhMZWtLSWRPK1BrQlVnRWlC?=
 =?utf-8?B?SVNNQVlxdU9rNUZXQmE1RVBlalZnbHE5Qlp1UStHcDVoQjA2ZVJvNUF0bWgz?=
 =?utf-8?B?Q1lGUkErZlNXSDBDd2FJbjFTNlhKR3hUYURwVE1WTkNjQUNVdjFiMW85ekdQ?=
 =?utf-8?Q?8jZVenwGWlPHad7EF4i0x/MuKGYIEC1Q82C3blqAGizo?=
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-nfEsJD17hyx//aHZvomo"
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 
	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
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR10MB5563.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 889a5f1e-df1a-4146-4834-08dc83d16069
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jun 2024 13:30:46.8371
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 3+9yZDaHVR4n239fkxLSl/y+Q50u2nG3/FbhCxUWA1djPIQWCW4Lus1YKkbcxB41U6c0IvIKsA7jPk+IN4kJ/Cb7vjybYhWxPJq3SRBJrS8=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR10MB7387
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.650,FMLib:17.12.28.16
 definitions=2024-06-03_09,2024-05-30_01,2024-05-17_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 mlxscore=0 malwarescore=0
 suspectscore=0 spamscore=0 mlxlogscore=945 adultscore=0 phishscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2405010000
 definitions=main-2406030112
X-Proofpoint-GUID: 7fZ0Lj28_X2AyxiApf2xm1cK0kkaIzh7
X-Proofpoint-ORIG-GUID: 7fZ0Lj28_X2AyxiApf2xm1cK0kkaIzh7

--=-nfEsJD17hyx//aHZvomo
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, 17 May 2024 15:23:52 +0200, Greg Kroah-Hartman wrote:
> In the Linux kernel, the following vulnerability has been resolved:
>=20
> usb: cdc-wdm: close race between read and workqueue
>=20
> [...]
>=20
> The Linux kernel CVE team has assigned CVE-2024-35812 to this issue.

This commit has been reversed in stable trees as it introduces a regression=
.

Thanks,
Siddh

--=-nfEsJD17hyx//aHZvomo
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
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=1uz6
-----END PGP SIGNATURE-----

--=-nfEsJD17hyx//aHZvomo--