Bug 1220449 (CVE-2024-26604)

Summary:	VUL-0: CVE-2024-26604: kernel: revert "kobject: Remove redundant checks for whether ktype is NULL"
Product:	[Novell Products] SUSE Security Incidents	Reporter:	SMASH SMASH <smash_bz>
Component:	Incidents	Assignee:	Kernel Bugs <kernel-bugs>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P5 - None	CC:	andrea.mattiazzo
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/395189/
Whiteboard:	CVSSv3.1:SUSE:CVE-2024-26604:5.5:(AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description SMASH SMASH 2024-02-27 13:39:03 UTC

In the Linux kernel, the following vulnerability has been resolved:

Revert "kobject: Remove redundant checks for whether ktype is NULL"

This reverts commit 1b28cb81dab7c1eedc6034206f4e8d644046ad31.

It is reported to cause problems, so revert it for now until the root
cause can be found.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-26604
https://www.cve.org/CVERecord?id=CVE-2024-26604
https://bugzilla.redhat.com/show_bug.cgi?id=2266257
https://lore.kernel.org/linux-cve-announce/2024022416-CVE-2024-26604-71a3@gregkh/T/#u

Patch:
https://git.kernel.org/stable/c/3ca8fbabcceb8bfe44f7f50640092fd8f1de375c

Comment 1 Andrea Mattiazzo 2024-02-27 13:39:32 UTC

Closing since all codestreams are not affected or already patched.