ARM: zynq: Fix refcount leak in zynq_early_slcr_init (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.19 % · centile 9 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: ARM: zynq: Fix refcount leak in zynq_early_slcr_init of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on error path. Add missing of_node_put() to avoid refcount leak.
Références
- https://git.kernel.org/stable/c/f00bc6727adf840eb208700ea27cda4f3742629d
- https://git.kernel.org/stable/c/351b7e93d02b50b2faae2d4bda28e16a8389cbb7
- https://git.kernel.org/stable/c/ede0334bf4df360f4f9446075cffbbb3bc54d0b6
- https://git.kernel.org/stable/c/227f8c1c5c4b3d131b66e57e58d38054f441b915
- https://git.kernel.org/stable/c/1cc12d10d13ae5ad8d3f7432a4c0156d221fc99b
- https://git.kernel.org/stable/c/e43a06c73be4b93d308f0df809ee0023b7c37b54
- https://git.kernel.org/stable/c/4c22ee805202087c2553c9175968e9e922d75bc1
- https://git.kernel.org/stable/c/9eedb910a3be0005b88c696a8552c0d4c9937cd4
Références européennes
- ENISA EUVD · EUVD-2023-60088
- GCVE · GCVE-0-2023-53818
Avis du CERT-FR
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 3329659df0300d1d0aa22f5e7063f83a88ef92aa < f00bc6727adf840eb208700ea27cda4f3742629d ; affected 3329659df0300d1d0aa22f5e7063f83a88ef92aa < 351b7e93d02b50b2faae2d4bda28e16a8389cbb7 ; affected 3329659df0300d1d0aa22f5e7063f83a88ef92aa < ede0334bf4df360f4f9446075cffbbb3bc54d0b6 ; affected 3329659df0300d1d0aa22f5e7063f83a88ef92aa < 227f8c1c5c4b3d131b66e57e58d38054f441b915 ; affected 3329659df0300d1d0aa22f5e7063f83a88ef92aa < 1cc12d10d13ae5ad8d3f7432a4c0156d221fc99b ; affected 3329659df0300d1d0aa22f5e7063f83a88ef92aa < e43a06c73be4b93d308f0df809ee0023b7c37b54 |
| Linux · Linux | affected 4.0 ; unaffected 0 < 4.0 ; unaffected 4.14.308 ≤ 4.14.* ; unaffected 4.19.276 ≤ 4.19.* ; unaffected 5.4.235 ≤ 5.4.* ; unaffected 5.10.173 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |