remoteproc: scp: Fix device reference leak on failed lookup (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a device does not prevent its driver data from going away.
References
- https://git.kernel.org/stable/c/f1c9512ae072996647fb829c6402348d1b72af39
- https://git.kernel.org/stable/c/d6ef9060775483bcf57291cbacbc0fe89b5857da
- https://git.kernel.org/stable/c/554689ff2d7561d91011e69a8bfcef1b71901b2b
- https://git.kernel.org/stable/c/6ca338cf2d386fd701b2dc27a2cd4c067a45d545
- https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b
- https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6
- https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a
- https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c
European references
- ENISA EUVD · EUVD-2026-76418
- GCVE · GCVE-0-2026-89512
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf < f1c9512ae072996647fb829c6402348d1b72af39 ; affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf < d6ef9060775483bcf57291cbacbc0fe89b5857da ; affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf < 554689ff2d7561d91011e69a8bfcef1b71901b2b ; affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf < 6ca338cf2d386fd701b2dc27a2cd4c067a45d545 ; affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf < f794c930d8238e370fd61fcb12cc301ae098231b ; affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf < c7e32814a6bf20f792d05f0bc9f94f0606311bc6 |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 5.10.270 ≤ 5.10.* ; unaffected 5.15.221 ≤ 5.15.* ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |