CVE-2021-46966

In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is always freed when reaching the end of the function. If the requested count is less than table.length, the allocated buffer will be freed but subsequent calls to cm_write() will still try to access it. Remove the unconditional kfree(buf) at the end of the function and set the buf to NULL in the -EINVAL error path to match the rest of function.

• linux linux kernel (>= 4.4.195 < 4.4.269) • linux linux kernel (>= 4.9.195 < 4.9.269) • linux linux kernel (>= 4.14.147 < 4.14.233) • linux linux kernel (>= 4.19.77 < 4.19.191) • linux linux kernel (>= 5.4 < 5.4.118) • linux linux kernel (>= 5.5 < 5.10.36) • linux linux kernel (>= 5.11 < 5.11.20) • linux linux kernel (>= 5.12 < 5.12.3)