amba: bus: fix refcount leak (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 ("drivers/amba: create devices from device tree") increases the refcount of of_node, but not releases it in amba_device_release, so there is refcount leak. By using of_node_put to avoid refcount leak.
References
- https://git.kernel.org/stable/c/94e398df32e850f26828690ee62f7441979583cc
- https://git.kernel.org/stable/c/9062ce0ccbd82fbe81cc839a512c0ad90847e01c
- https://git.kernel.org/stable/c/03db4fe7917bb160eeccf3968835475fa32b7e10
- https://git.kernel.org/stable/c/9baf2278b3eed2c50112169121257d8a6ee0606c
- https://git.kernel.org/stable/c/4f1807fddd9bf175ee5e14fffc6b6106e4b297ef
- https://git.kernel.org/stable/c/81ff633a88be2482c163d3acd2801d501261ce6a
- https://git.kernel.org/stable/c/206fadb7278ceac7593dd0b945a77b9df856a674
- https://git.kernel.org/stable/c/8b60a706166de5de82314494704c2419e7657bf8
- https://git.kernel.org/stable/c/e312cbdc11305568554a9e18a2ea5c2492c183f3
European references
- ENISA EUVD · EUVD-2023-60411
- GCVE · GCVE-0-2023-54230
CERT-FR advisories
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 < 94e398df32e850f26828690ee62f7441979583cc ; affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 < 9062ce0ccbd82fbe81cc839a512c0ad90847e01c ; affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 < 03db4fe7917bb160eeccf3968835475fa32b7e10 ; affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 < 9baf2278b3eed2c50112169121257d8a6ee0606c ; affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 < 4f1807fddd9bf175ee5e14fffc6b6106e4b297ef ; affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 < 81ff633a88be2482c163d3acd2801d501261ce6a |
| Linux · Linux | affected 3.1 ; unaffected 0 < 3.1 ; unaffected 4.14.326 ≤ 4.14.* ; unaffected 4.19.295 ≤ 4.19.* ; unaffected 5.4.257 ≤ 5.4.* ; unaffected 5.10.195 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |