← CVE Intelligence

CVE-2024-36959

pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate propname buffer, we need to drop the reference count we just took. Because the pinctrl_dt_free_maps() includes the droping operation, here we call it directly.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected a988dcd3dd9e691c5ccc3324b209688f3b5453e9 before 06780473cb8a858d1d6cab2673e021b072a852d1; affected 040f726fecd88121f3b95e70369785ad452dddf9 before 47d253c485491caaf70d8cd8c0248ae26e42581f; affected 777430aa4ddccaa5accec6db90ffc1d47f00d471 before 35ab679e8bb5a81a4f922d3efbd43e32bce69274; affected 97e5b508e96176f1a73888ed89df396d7041bfcb before 76aa2440deb9a35507590f2c981a69a57ecd305d; affected 91d5c5060ee24fe8da88cd585bb43b843d2f0dce before 518d5ddafeb084d6d9b1773ed85164300037d0e6; affected 91d5c5060ee24fe8da88cd585bb43b843d2f0dce before 026e24cf31733dbd97f41cc9bc5273ace428eeec; affected 91d5c5060ee24fe8da88cd585bb43b843d2f0dce before c7e02ccc9fdc496fe51e440e3e66ac36509ca049; affected 91d5c5060ee24fe8da88cd585bb43b843d2f0dce before a0cedbcc8852d6c77b00634b81e41f17f29d9404; affected aaf552c5d53abe4659176e099575fe870d2e4768; affected b4d9f55cd38435358bc16d580612bc0d798d7b4c; affected 5834a3a98cd266ad35a229923c0adbd0addc8d68; affected 4.19.267 before 4.19.314; affected 5.4.225 before 5.4.276; affected 5.10.156 before 5.10.217; affected 5.15.80 before 5.15.159; affected 4.9.334 before 4.10; affected 4.14.300 before 4.15; affected 6.0.10 before 6.1
Linux / Linuxaffected 6.1; unaffected 0 before 6.1; unaffected 4.19.314 through 4.19.*; unaffected 5.4.276 through 5.4.*; unaffected 5.10.217 through 5.10.*; unaffected 5.15.159 through 5.15.*; unaffected 6.1.91 through 6.1.*; unaffected 6.6.31 through 6.6.*; unaffected 6.8.10 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.