title: mtd: require write permissions for locking and badblock ioctls
description: In the Linux kernel, the following vulnerability has been resolved:
mtd: require write permissions for locking and badblock ioctls
MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require
write permission. Depending on the hardware MEMLOCK might even be
write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK
is always write-once.
MEMSETBADBLOCK modifies the bad block table.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 1c9f9125892a, lessThan: f4d28d8b9b0e, status: affected, versionType: git
version: 583d42400532, lessThan: 9625b00cac66, status: affected, versionType: git
version: 389c74c218d3, lessThan: f73b29819c63, status: affected, versionType: git
version: ab1a602a9cea, lessThan: 75ed985bd6c8, status: affected, versionType: git
version: 9a53e8bd59d9, lessThan: 5880afefe0cb, status: affected, versionType: git
version: f7e6b19bc764, lessThan: 7b6552719c0c, status: affected, versionType: git
version: f7e6b19bc764, lessThan: 077259f5e777, status: affected, versionType: git
version: f7e6b19bc764, lessThan: a08799d3e8c8, status: affected, versionType: git
version: f7e6b19bc764, lessThan: 1e97743fd180, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 5.9, status: affected
version: 0, lessThan: 5.9, status: unaffected, versionType: custom
version: 4.4.269, lessThanOrEqual: 4.4.*, status: unaffected, versionType: custom
version: 4.9.269, lessThanOrEqual: 4.9.*, status: unaffected, versionType: custom
version: 4.14.233, lessThanOrEqual: 4.14.*, status: unaffected, versionType: custom
version: 4.19.191, lessThanOrEqual: 4.19.*, status: unaffected, versionType: custom
version: 5.4.119, lessThanOrEqual: 5.4.*, status: unaffected, versionType: custom
version: 5.10.37, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.11.21, lessThanOrEqual: 5.11.*, status: unaffected, versionType: custom
version: 5.12.4, lessThanOrEqual: 5.12.*, status: unaffected, versionType: custom
version: 5.13, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
