soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.27 % · percentile 19 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. In brcmstb_init_sram, it pass dn to of_address_to_resource(), of_address_to_resource() will call of_find_device_by_node() to take reference, so we should release the reference returned by of_find_matching_node().
References
- https://git.kernel.org/stable/c/4f5877bdf7b593e988f1924f4c3df6523f80b39c
- https://git.kernel.org/stable/c/734a4d15142bb4c8ecad2d8ec70d7564e78ae34d
- https://git.kernel.org/stable/c/30bbfeb480ae8b5ee43199d72417b232590440c2
- https://git.kernel.org/stable/c/10ba9d499a9fd82ed40897e734ba19870a879407
- https://git.kernel.org/stable/c/dcafd5463d8f20c4f90ddc138a5738adb99f74c8
- https://git.kernel.org/stable/c/37d838de369b07b596c19ff3662bf0293fdb09ee
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | CISA-ADP |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
European references
- ENISA EUVD · EUVD-2022-54555
- GCVE · GCVE-0-2022-49678
CERT-FR advisories
- CERTFR-2025-AVI-0336 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0307 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0252 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15 < 4.19.250cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.202cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.127cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.51cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 5.18.8cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 0b741b8234c86065fb6954d32d427b3f7e14756f < 4f5877bdf7b593e988f1924f4c3df6523f80b39c ; affected 0b741b8234c86065fb6954d32d427b3f7e14756f < 734a4d15142bb4c8ecad2d8ec70d7564e78ae34d ; affected 0b741b8234c86065fb6954d32d427b3f7e14756f < 30bbfeb480ae8b5ee43199d72417b232590440c2 ; affected 0b741b8234c86065fb6954d32d427b3f7e14756f < 10ba9d499a9fd82ed40897e734ba19870a879407 ; affected 0b741b8234c86065fb6954d32d427b3f7e14756f < dcafd5463d8f20c4f90ddc138a5738adb99f74c8 ; affected 0b741b8234c86065fb6954d32d427b3f7e14756f < 37d838de369b07b596c19ff3662bf0293fdb09ee |
| Linux · Linux | affected 4.15 ; unaffected 0 < 4.15 ; unaffected 4.19.250 ≤ 4.19.* ; unaffected 5.4.202 ≤ 5.4.* ; unaffected 5.10.127 ≤ 5.10.* ; unaffected 5.15.51 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |