Description
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reset_method_store() memory leak In reset_method_store(), a string is allocated via kstrndup() and assigned to the local "options". options is then used in with strsep() to find spaces: while ((name = strsep(&options, " ")) != NULL) { If there are no remaining spaces, then options is set to NULL by strsep(), so the subsequent kfree(options) doesn't free the memory allocated via kstrndup(). Fix by using a separate tmp_options to iterate with strsep() so options is preserved.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d88f521da3efd698e36d0d504a2abba6ac4f5ef8 to < 403efb4457c0c8f8f51e904cc57d39193780c6bdaffectedd88f521da3efd698e36d0d504a2abba6ac4f5ef8 to < 931d07ccffcc3614f20aaf602b31e89754e21c59affectedd88f521da3efd698e36d0d504a2abba6ac4f5ef8 to < 8e098baf6bc3f3a6aefc383509aba07e202f7ee0affectedd88f521da3efd698e36d0d504a2abba6ac4f5ef8 to < 543d0eb40e45c6a51f1bff02f417b602e54472d5affectedd88f521da3efd698e36d0d504a2abba6ac4f5ef8 to < fe6fae61f3b993160aef5fe2b7141a83872c144faffectedd88f521da3efd698e36d0d504a2abba6ac4f5ef8 to < 2985b1844f3f3447f2d938eff1ef6762592065a5affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected5.15.174 to ≤ 5.15.*unaffected6.1.120 to ≤ 6.1.*unaffected6.6.64 to ≤ 6.6.*unaffected6.11.11 to ≤ 6.11.*unaffected6.12.2 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/403efb4457c0c8f8f51e904cc57d39193780c6bd ↗
- https://git.kernel.org/stable/c/931d07ccffcc3614f20aaf602b31e89754e21c59 ↗
- https://git.kernel.org/stable/c/8e098baf6bc3f3a6aefc383509aba07e202f7ee0 ↗
- https://git.kernel.org/stable/c/543d0eb40e45c6a51f1bff02f417b602e54472d5 ↗
- https://git.kernel.org/stable/c/fe6fae61f3b993160aef5fe2b7141a83872c144f ↗
- https://git.kernel.org/stable/c/2985b1844f3f3447f2d938eff1ef6762592065a5 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗