In the Linux kernel, the following vulnerability has been resolved:
auxdisplay: charlcd: cancel backlight work on registration failure
With CONFIG_CHARLCD_BL_FLASH, charlcd_init() schedules bl_work before
charlcd_register() calls misc_register(). If registration fails, the
caller frees the charlcd object while delayed work still contains its
address. Add charlcd_deinit() to cancel the delayed work and turn the backlight
off.
Use it for both registration rollback and normal unregistration.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
References 7
https://git.kernel.org/stable/c/84858671842ae5857b9ed1202b62f9045373dcd1
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e3e3bf40916c1e810df03958cfa7ba6883cdce79
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fe7ba73dde94c5f413b1588cd444b49105015dda
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ff2fb3c1e60cb247ea3e28c0ea0bea81c18f7755
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/22586432c1aba89d9bd33f3173408dac830f220b
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6eaed64a32e550daf0dc9549742b3ab9e41d984f
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/cd97b3c68fe3c06c8067cc59d7dff976c5b7ea04
416baaa9-dc9f-4396-8d5f-8c081fb06d67