diff --git a/patches.suse/media-dvbdev-Fix-memleak-in-dvb_register_device.patch b/patches.suse/media-dvbdev-Fix-memleak-in-dvb_register_device.patch new file mode 100644 index 0000000..a6798b5 --- /dev/null +++ b/patches.suse/media-dvbdev-Fix-memleak-in-dvb_register_device.patch @@ -0,0 +1,37 @@ +From 167faadfcf9339088910e9e85a1b711fcbbef8e9 Mon Sep 17 00:00:00 2001 +From: Dinghao Liu +Date: Mon, 24 Aug 2020 14:27:46 +0200 +Subject: [PATCH] media: dvbdev: Fix memleak in dvb_register_device +Git-commit: 167faadfcf9339088910e9e85a1b711fcbbef8e9 +Patch-mainline: v5.11-rc1 +References: CVE-2022-45884 bsc#1205756 + +When device_create() fails, dvbdev and dvbdevfops should +be freed just like when dvb_register_media_device() fails. + +Signed-off-by: Dinghao Liu +Signed-off-by: Sean Young +Signed-off-by: Mauro Carvalho Chehab +Acked-by: Takashi Iwai + +--- + drivers/media/dvb-core/dvbdev.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/drivers/media/dvb-core/dvbdev.c b/drivers/media/dvb-core/dvbdev.c +index 959fa2820259..5ff7bedee247 100644 +--- a/drivers/media/dvb-core/dvbdev.c ++++ b/drivers/media/dvb-core/dvbdev.c +@@ -539,6 +539,9 @@ int dvb_register_device(struct dvb_adapter *adap, struct dvb_device **pdvbdev, + if (IS_ERR(clsdev)) { + pr_err("%s: failed to create device dvb%d.%s%d (%ld)\n", + __func__, adap->num, dnames[type], id, PTR_ERR(clsdev)); ++ dvb_media_device_free(dvbdev); ++ kfree(dvbdevfops); ++ kfree(dvbdev); + return PTR_ERR(clsdev); + } + dprintk("DVB: register adapter%d/%s%d @ minor: %i (0x%02x)\n", +-- +2.35.3 + diff --git a/series.conf b/series.conf index 31a189a..90297f6 100644 --- a/series.conf +++ b/series.conf @@ -26493,6 +26493,7 @@ patches.suse/net-x25-prevent-a-couple-of-overflows.patch patches.suse/tty-Fix-pgrp-locking-in-tiocspgrp.patch patches.suse/tty-Fix-session-locking.patch + patches.suse/media-dvbdev-Fix-memleak-in-dvb_register_device.patch patches.suse/mwifiex-Fix-possible-buffer-overflows-in-mwifiex_2.patch patches.suse/USB-core-return-EREMOTEIO-on-short-usb_control_msg_r.patch patches.suse/jfs-Fix-array-index-bounds-check-in-dbAdjTree.patch