Public bug reported:

SRU Justification

[ Impact ]

Fixing CVE-2025-39993 requires a new structure refcount_t, introduced by
a series of commits in 2017

5d6dec6fba38    Kees Cook       Sat Jul 1 11:01:29 2017 -0700   
locking/refcount: Remove the half-implemented refcount_sub() API
fd25d19f6b8d    Kees Cook       Wed Jun 21 13:00:26 2017 -0700  
locking/refcount: Create unchecked atomic_t implementation
d557d1b58b35    Greg Kroah-Hartman      Thu May 4 15:51:03 2017 -0700   
refcount: change EXPORT_SYMBOL markings
NOT INCLUDED  b78c0d471255    Peter Zijlstra  Wed Feb 1 16:07:55 2017 +0100   
locking/refcounts: Use atomic_try_cmpxchg()
bd174169c7a1    David Windsor   Fri Mar 10 10:34:12 2017 -0500  
locking/refcount: Add refcount_t API kernel-doc comments
NOT INCLUDED  44fe84459faf1 (Peter Zijlstra     2017-03-27 13:54:38 +0200)
9dcfe2c75b51    Ingo Molnar     Wed Mar 1 09:25:55 2017 +0100   
locking/refcounts: Change WARN() to WARN_ONCE()
318b1dedcd39    Elena Reshetova Thu Feb 23 15:09:34 2017 +0200  
locking/refcounts: Add missing kernel.h header to have UINT_MAX defined
29dee3c03abc    Peter Zijlstra  Fri Feb 10 16:27:52 2017 +0100  
locking/refcounts: Out-of-line everything
NOT INCLUDED a9ebf306f52c7 (Peter Zijlstra     2017-02-01 16:39:38 +0100)
f405df5de317    Peter Zijlstra  Mon Nov 14 18:06:19 2016 +0100  refcount_t: 
Introduce a special purpose refcount type

By importing the listed commits, the new config option
CONFIG_REFCOUNT_FULL is added and it needs to be taken care of.

[ Fix ]

Enable the option in the kernel config
Following what has been done in Bionic, by default the option is set to N, but 
on arm64 will be set as Y.

[ Test Case ]

Compile and boot tested.

[ Regression potential ]

The new header, config and library is self contained and used only by the 
drivers/media/rc/imon.c, the only one including the header itself.
There could be regressions in the use of the SoundGraph iMON MultiMedia 
IR/Display in case the new refcount_t library contains flaws.

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: linux (Ubuntu Xenial)
     Importance: Undecided
         Status: New

** Also affects: linux (Ubuntu Xenial)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2131205

Title:
  Xenial: CVE-2025-39993 - Add new CONFIG_REFCOUNT_FULL config option

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2131205/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to