Description
In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxl_file_register_afu() If device_register() returns error in ocxl_file_register_afu(), the name allocated by dev_set_name() need be freed. As comment of device_register() says, it should use put_device() to give up the reference in the error path. So fix this by calling put_device(), then the name can be freed in kobject_cleanup(), and info is freed in info_release().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
75ca758adbafc81804c39b2c200ecdc819a6c042 to < 0cd05062371a49774e8a45258bdedf0bd6d3d327affected75ca758adbafc81804c39b2c200ecdc819a6c042 to < 7525741cb302a1672b8c3a5edb2a08e4229b5c7caffected75ca758adbafc81804c39b2c200ecdc819a6c042 to < 3299983a6bf628249ac650908e62d12de959341eaffected75ca758adbafc81804c39b2c200ecdc819a6c042 to < 557b7de055d1e230ddb6664c29d26917b8db9143affected75ca758adbafc81804c39b2c200ecdc819a6c042 to < 2fce8b3583d1641a1716486f408478b58e96ec91affected75ca758adbafc81804c39b2c200ecdc819a6c042 to < a4cb1004aeed2ab893a058fad00a5b41a12c4691affected
Linux Linux
Default version status: affected
5.2affected0 to < 5.2unaffected5.4.229 to ≤ 5.4.*unaffected5.10.163 to ≤ 5.10.*unaffected5.15.86 to ≤ 5.15.*unaffected6.0.16 to ≤ 6.0.*unaffected6.1.2 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0cd05062371a49774e8a45258bdedf0bd6d3d327 ↗
- https://git.kernel.org/stable/c/7525741cb302a1672b8c3a5edb2a08e4229b5c7c ↗
- https://git.kernel.org/stable/c/3299983a6bf628249ac650908e62d12de959341e ↗
- https://git.kernel.org/stable/c/557b7de055d1e230ddb6664c29d26917b8db9143 ↗
- https://git.kernel.org/stable/c/2fce8b3583d1641a1716486f408478b58e96ec91 ↗
- https://git.kernel.org/stable/c/a4cb1004aeed2ab893a058fad00a5b41a12c4691 ↗