diff options
| author | Mauro Matteo Cascella <mcascell@redhat.com> | 2022-07-05 22:05:43 +0200 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2022-07-06 09:31:15 +0200 |
| commit | 6c8fa961da5e60f574bb52fd3ad44b1e9e8ad4b8 (patch) | |
| tree | 1fa7da9a1dd2ff4a47879164df8331430d0aae70 /pc-bios | |
| parent | 170ed475cd5f78261c56cebf12541ceee4807594 (diff) | |
| download | qemu-6c8fa961da5e60f574bb52fd3ad44b1e9e8ad4b8.zip qemu-6c8fa961da5e60f574bb52fd3ad44b1e9e8ad4b8.tar.gz qemu-6c8fa961da5e60f574bb52fd3ad44b1e9e8ad4b8.tar.bz2 | |
scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
Set current_req->req to NULL to prevent reusing a free'd buffer in case of
repeated SCSI cancel requests. Thanks to Thomas Huth for suggesting the patch.
Fixes: CVE-2022-0216
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/972
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reviewed-by: Thomas Huth <thuth@redhat.com>
Message-Id: <20220705200543.2366809-1-mcascell@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'pc-bios')
0 files changed, 0 insertions, 0 deletions