regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.25 % · centile 17 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: regulator: of: Fix refcount leak bug in of_get_regulation_constraints() We should call the of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount.
Références
- https://git.kernel.org/stable/c/a23098cc32860272dc6c3200ff20c34c65b7b694
- https://git.kernel.org/stable/c/b9ca8585c766616563cf3c062c6878f61f83cf00
- https://git.kernel.org/stable/c/35f9e861d9b9434903a8ede37a3561f78985826d
- https://git.kernel.org/stable/c/332e555dca074c4eb2084898021c3676423814c3
- https://git.kernel.org/stable/c/c9df8ff290097aabd5c9200f7f729b0813d37b19
- https://git.kernel.org/stable/c/11ecb4f8735b0230d54a82c18b21ea778b695d61
- https://git.kernel.org/stable/c/fc7b19f547bc9e622060a0a9a39da2330aa21c53
- https://git.kernel.org/stable/c/66efb665cd5ad69b27dca8571bf89fc6b9c628a4
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2022-55455
- GCVE · GCVE-0-2022-50191
Avis du CERT-FR
- CERTFR-2026-AVI-0081 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-1009 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0805 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0649 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0607 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0587 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 3.19 < 4.14.291cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15 < 4.19.256cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.211cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.137cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.61cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 5.18.18cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.19 < 5.19.2
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 40e20d68bb3fb1ce2704c886d597918988d3321d < a23098cc32860272dc6c3200ff20c34c65b7b694 ; affected 40e20d68bb3fb1ce2704c886d597918988d3321d < b9ca8585c766616563cf3c062c6878f61f83cf00 ; affected 40e20d68bb3fb1ce2704c886d597918988d3321d < 35f9e861d9b9434903a8ede37a3561f78985826d ; affected 40e20d68bb3fb1ce2704c886d597918988d3321d < 332e555dca074c4eb2084898021c3676423814c3 ; affected 40e20d68bb3fb1ce2704c886d597918988d3321d < c9df8ff290097aabd5c9200f7f729b0813d37b19 ; affected 40e20d68bb3fb1ce2704c886d597918988d3321d < 11ecb4f8735b0230d54a82c18b21ea778b695d61 |
| Linux · Linux | affected 3.19 ; unaffected 0 < 3.19 ; unaffected 4.14.291 ≤ 4.14.* ; unaffected 4.19.256 ≤ 4.19.* ; unaffected 5.4.211 ≤ 5.4.* ; unaffected 5.10.137 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |