← CVE Intelligence

CVE-2024-38554

ax25: Fix reference count leak issue of net_device PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of net_device There is a reference count leak issue of the object "net_device" in ax25_dev_device_down(). When the ax25 device is shutting down, the ax25_dev_device_down() drops the reference count of net_device one or zero times depending on if we goto unlock_put or not, which will cause memory leak. In order to solve the above issue, decrease the reference count of net_device after dev->ax25_ptr is set to null.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected d01ffb9eee4af165d83b08dd73ebdf9fe94a519b before 3ec437f9bbae68e9b38115c4c91de995f73f6bad; affected d01ffb9eee4af165d83b08dd73ebdf9fe94a519b before 965d940fb7414b310a22666503d2af69459c981b; affected d01ffb9eee4af165d83b08dd73ebdf9fe94a519b before 8bad3a20a27be8d935f2aae08d3c6e743754944a; affected d01ffb9eee4af165d83b08dd73ebdf9fe94a519b before eef95df9b752699bddecefa851f64858247246e9; affected d01ffb9eee4af165d83b08dd73ebdf9fe94a519b before 36e56b1b002bb26440403053f19f9e1a8bc075b2; affected ef0a2a0565727a48f2e36a2c461f8b1e3a61922d; affected e2b558fe507a1ed4c43db2b0057fc6e41f20a14c; affected 418993bbaafb0cd48f904ba68eeda052d624c821; affected 5ea00fc60676c0eebfa8560ec461209d638bca9d; affected 9af0fd5c4453a44c692be0cbb3724859b75d739b; affected 4.14.277 before 4.15; affected 4.19.240 before 4.20; affected 5.4.190 before 5.5; affected 5.10.112 before 5.11; affected 5.15.35 before 5.16
Linux / Linuxaffected 5.17; unaffected 0 before 5.17; unaffected 6.1.93 through 6.1.*; unaffected 6.6.33 through 6.6.*; unaffected 6.8.12 through 6.8.*; unaffected 6.9.3 through 6.9.*; unaffected 6.10 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.