Linux 3274 Published by

The Linux kernel has received updates to fix various issues across different versions, including 6.18.1, 6.17.12, and 6.12.62. One of the patches addressed a potential out-of-bounds read in the rtl8723bs module by implementing checks to prevent access to frames outside expected buffer areas. The updates also fixed stack buffer overflow issues in the same module related to incorrect association request information and corrected improper chip identification in the AD4080 ADC driver. Additionally, changes were made to the COMEDI driver to verify device attachment before performing operations and limited encoder chip handling within a specific function, while fixing an issue in the c6xdigio driver where it would unregister itself unnecessarily.

Linux kernel 6.18.1 released
Linux kernel 6.17.12 released
Linux kernel 6.12.62 released




Linux kernel 6.18.1, 6.17.12, and 6.12.62 released

A recent batch of updates for the Linux kernel includes fixes across several versions: 6.18.1, 6.17.12, and 6.12.62.

Kernel

One thing that popped up was a solution related to a potential out-of-bounds read in what's called the staging driver rtl8723bs module. The issue involved how the kernel handled specific frames from devices under certain conditions. If a malicious beacon frame with an Extended Service Request (ESR) Information Element placed just outside the expected buffer area was received, it could potentially crash the system by causing a kernel panic. The patch tackled this issue by implementing checks to guarantee the system stays within its boundaries before attempting to access those frames.

Another one was a stack buffer overflow issue in the same rtl8723bs module's function for parsing IE information during association requests. A problem could occur if a device sent back association request information with an I.E. length claim that was incorrect, specifically longer than 16 bytes, according to reports, which could potentially corrupt kernel memory.

Next, the COMEDI driver undergoes updates to avert potential issues in other areas. One patch makes sure certain operations only happen after verifying that a device is properly attached first. This ensures steps like checking valid routes aren't skipped inadvertently. Another change involved limiting how many encoder chips could be handled in one go within a specific function.

Over on the c6xdigio driver side, an issue was fixed where the code would unregister itself even if it wasn't currently active or registered at all first. This could lead to confusing warning messages appearing unnecessarily and potentially crashes down the line when other parts of the system try to use it.

Finally, there's a fix for the AD4080 ADC driver related to correctly identifying chips. The original code read only part of the product ID register, specifically just three bits, which wasn't enough for reliable identification. The update reads two separate registers (PRODUCT_ID_L and PRODUCT_ID_H) instead, combining them into a full 16-bit value for much more accurate chip detection.

Linux kernel 6.18.1 released


Linux kernel version 6.18.1 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.1.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.18.1.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.1.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.18.1/v6.18



Linux kernel 6.17.12 released


Linux kernel version 6.17.12 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.17.12.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.17.12.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.17.12.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.17.12/v6.17.11



Linux kernel 6.12.62 released


Linux kernel version 6.12.62 is now available:

Full source: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.62.tar.xz
Patch: https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.12.62.xz
PGP Signature: https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.62.tar.sign

You can view the summary of the changes at the following URL:
https://git.kernel.org/stable/ds/v6.12.62/v6.12.61