bus: qcom: Put child node before return (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child node before return to fix potential reference count leak. Generally, the reference count of child is incremented and decremented automatically in the macro for_each_available_child_of_node() and should be decremented manually if the loop is broken in loop body.
References
- https://git.kernel.org/stable/c/a6191e91c10e50bd51db65a00e03d02b6b0cf8c4
- https://git.kernel.org/stable/c/94810fc52925eb122a922df7f9966cf3f4ba7391
- https://git.kernel.org/stable/c/a399dd80e697a02cfb23e2fc09b87849994043d9
- https://git.kernel.org/stable/c/3a76ec28824c01b57aa1f0927841d75e4f167cb8
- https://git.kernel.org/stable/c/00f6abd3509b1d70d0ab0fbe65ce5685cebed8be
- https://git.kernel.org/stable/c/6b68c03dfc79cd95a58dfd03f91f6e82829a1b0c
- https://git.kernel.org/stable/c/c6f8e0dc8da1cd78d640dee392071cc2326ec1b2
- https://git.kernel.org/stable/c/ac6ad7c2a862d682bb584a4bc904d89fa7721af8
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-33702
- GCVE · GCVE-0-2021-47054
CERT-FR advisories
- CERTFR-2024-AVI-0265 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0242 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.9 < 4.9.269cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.10 < 4.14.233cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15 < 4.19.191cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.119cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.37cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.11.21cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.12 < 5.12.4
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 335a127548081322bd2b294d715418648912f20c < a6191e91c10e50bd51db65a00e03d02b6b0cf8c4 ; affected 335a127548081322bd2b294d715418648912f20c < 94810fc52925eb122a922df7f9966cf3f4ba7391 ; affected 335a127548081322bd2b294d715418648912f20c < a399dd80e697a02cfb23e2fc09b87849994043d9 ; affected 335a127548081322bd2b294d715418648912f20c < 3a76ec28824c01b57aa1f0927841d75e4f167cb8 ; affected 335a127548081322bd2b294d715418648912f20c < 00f6abd3509b1d70d0ab0fbe65ce5685cebed8be ; affected 335a127548081322bd2b294d715418648912f20c < 6b68c03dfc79cd95a58dfd03f91f6e82829a1b0c |
| Linux · Linux | affected 4.9 ; unaffected 0 < 4.9 ; unaffected 4.9.269 ≤ 4.9.* ; unaffected 4.14.233 ≤ 4.14.* ; unaffected 4.19.191 ≤ 4.19.* ; unaffected 5.4.119 ≤ 5.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |