CVE-2022-50642

platform/chrome: cros_ec_typec: zero out stale pointers

References

Debian security tracker
cve.org

Notes

 carnil> Introduced in f28adb41dab4 ("platform/chrome: cros_ec_typec: Register Type C
 carnil> switches")
 carnil> 1a8912caba02 ("platform/chrome: cros_ec_typec: Get retimer handle"). Vulnerable
 carnil> versions: 5.9.

Bugs

Status

Branch	Status
upstream	released (6.2-rc1) [9a8aadcf0b459c1257b9477fd6402e1d5952ae07]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.6-upstream-stable	N/A "Fixed before branching point"
6.1-upstream-stable	released (6.1.2) [6613f36a2fa5c69e528bccba8b3d831f759dad2f]
5.10-upstream-stable	needed
sid	released (6.1.4-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	N/A "Fixed before branching point"
5.10-bullseye-security	needed