Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-38554

ax25: Fix reference count leak issue of net_device

Description

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of net_device There is a reference count leak issue of the object "net_device" in ax25_dev_device_down(). When the ax25 device is shutting down, the ax25_dev_device_down() drops the reference count of net_device one or zero times depending on if we goto unlock_put or not, which will cause memory leak. In order to solve the above issue, decrease the reference count of net_device after dev->ax25_ptr is set to null.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d01ffb9eee4af165d83b08dd73ebdf9fe94a519b to < 3ec437f9bbae68e9b38115c4c91de995f73f6badaffected
  • d01ffb9eee4af165d83b08dd73ebdf9fe94a519b to < 965d940fb7414b310a22666503d2af69459c981baffected
  • d01ffb9eee4af165d83b08dd73ebdf9fe94a519b to < 8bad3a20a27be8d935f2aae08d3c6e743754944aaffected
  • d01ffb9eee4af165d83b08dd73ebdf9fe94a519b to < eef95df9b752699bddecefa851f64858247246e9affected
  • d01ffb9eee4af165d83b08dd73ebdf9fe94a519b to < 36e56b1b002bb26440403053f19f9e1a8bc075b2affected
  • ef0a2a0565727a48f2e36a2c461f8b1e3a61922daffected
  • e2b558fe507a1ed4c43db2b0057fc6e41f20a14caffected
  • 418993bbaafb0cd48f904ba68eeda052d624c821affected
  • 5ea00fc60676c0eebfa8560ec461209d638bca9daffected
  • 9af0fd5c4453a44c692be0cbb3724859b75d739baffected
  • 4.14.277 to < 4.15affected
  • 4.19.240 to < 4.20affected
  • 5.4.190 to < 5.5affected
  • 5.10.112 to < 5.11affected
  • 5.15.35 to < 5.16affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.1.93 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.8.12 to ≤ 6.8.*unaffected
  • 6.9.3 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References