soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.23 % · centile 14 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() There are two refcount leak bugs in qcom_smsm_probe(): (1) The 'local_node' is escaped out from for_each_child_of_node() as the break of iteration, we should call of_node_put() for it in error path or when it is not used anymore. (2) The 'node' is escaped out from for_each_available_child_of_node() as the 'goto', we should call of_node_put() for it in goto target.
Références
- https://git.kernel.org/stable/c/1bbe75d466e5118b7d49ef4a346c3ce5742da4e8
- https://git.kernel.org/stable/c/bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43
- https://git.kernel.org/stable/c/42df28994eba7b56c762f7bbe7efd5611a1cd15b
- https://git.kernel.org/stable/c/1e3ed59370c712df436791efed120f0c082aa9bc
- https://git.kernel.org/stable/c/39781c98ad46b4e85053345dff797240c1ed7935
- https://git.kernel.org/stable/c/96e0028debdd07a6d582f0dfadf9a3ec2b5fffff
- https://git.kernel.org/stable/c/8fb6112bd49c0e49f2cf51604231d85ff00284bb
- https://git.kernel.org/stable/c/ee7fc83ce0e6986ff9b1c1d7e994fbbf8d43861d
- https://git.kernel.org/stable/c/af8f6f39b8afd772fda4f8e61823ef8c021bf382
Références européennes
- ENISA EUVD · EUVD-2025-205171
- GCVE · GCVE-0-2022-50703
Avis du CERT-FR
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0128 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected c97c4090ff72297a878a37715bd301624b71c885 < 1bbe75d466e5118b7d49ef4a346c3ce5742da4e8 ; affected c97c4090ff72297a878a37715bd301624b71c885 < bd4666bf5562fe8e8e5e9bd6fc805d30e1767f43 ; affected c97c4090ff72297a878a37715bd301624b71c885 < 42df28994eba7b56c762f7bbe7efd5611a1cd15b ; affected c97c4090ff72297a878a37715bd301624b71c885 < 1e3ed59370c712df436791efed120f0c082aa9bc ; affected c97c4090ff72297a878a37715bd301624b71c885 < 39781c98ad46b4e85053345dff797240c1ed7935 ; affected c97c4090ff72297a878a37715bd301624b71c885 < 96e0028debdd07a6d582f0dfadf9a3ec2b5fffff |
| Linux · Linux | affected 4.5 ; unaffected 0 < 4.5 ; unaffected 4.9.331 ≤ 4.9.* ; unaffected 4.14.296 ≤ 4.14.* ; unaffected 4.19.262 ≤ 4.19.* ; unaffected 5.4.220 ≤ 5.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |