CVSS 5.5 · Medium EPSS 0,23%
Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic. MDIOBUS_ALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and __mdiobus_register() fails, but device_register() was called In case of device_register() has been called we should call put_device() to correctly free the memory allocated for this device, but mdiobus_free() calls just kfree(dev) in case of MDIOBUS_ALLOCATED state To avoid this behaviour we need to set bus->state to MDIOBUS_UNREGISTERED _before_ calling device_register(), because put_device() should be called even in case of device_register() failure.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 2.6.28 hingga sebelum 4.4.289 |
| linux | linux kernel | Versi 4.5 hingga sebelum 4.9.287 |
| linux | linux kernel | Versi 4.10 hingga sebelum 4.14.251 |
| linux | linux kernel | Versi 4.15 hingga sebelum 4.19.211 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.153 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.73 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.14.12 |
| linux | linux kernel | Versi 5.15 rc1 |
| linux | linux kernel | Versi 5.15 rc2 |
| linux | linux kernel | Versi 5.15 rc3 |
| linux | linux kernel | Versi 5.15 rc4 |