Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node. However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak. Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f before 2560c97f63bb99b26d9f19b23a4f66ea24c9dc14; affected 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f before 51afb7da697b698996351740b4f39fb05ce2afd4; affected 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f before 880ac50b0bfae06d7ab5f1843253adfb86aa173a; affected 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f before f322955d9a1c344ed943752f05aacea7bc22e025; affected 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f before 36e4843fe39ea2f17f4de6d59fba26271916c184; affected 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f before bf4a195f063b0a0805c1417f6aad1dd32ea48f0f |
| Linux / Linux | affected 5.0; unaffected 0 before 5.0; unaffected 6.1.178 through 6.1.*; unaffected 6.6.145 through 6.6.*; unaffected 6.12.97 through 6.12.*; unaffected 6.18.40 through 6.18.*; unaffected 7.1.5 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/2560c97f63bb99b26d9f19b23a4f66ea24c9dc14
- https://git.kernel.org/stable/c/51afb7da697b698996351740b4f39fb05ce2afd4
- https://git.kernel.org/stable/c/880ac50b0bfae06d7ab5f1843253adfb86aa173a
- https://git.kernel.org/stable/c/f322955d9a1c344ed943752f05aacea7bc22e025
- https://git.kernel.org/stable/c/36e4843fe39ea2f17f4de6d59fba26271916c184
- https://git.kernel.org/stable/c/bf4a195f063b0a0805c1417f6aad1dd32ea48f0f