CVE-2024-38554

ax25: Fix reference count leak issue of net_device

published June 19, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ax25: Fix reference count leak issue of net_device

There is a reference count leak issue of the object "net_device" in

ax25_dev_device_down(). When the ax25 device is shutting down, the

ax25_dev_device_down() drops the reference count of net_device one

or zero times depending on if we goto unlock_put or not, which will

cause memory leak.

In order to solve the above issue, decrease the reference count of

net_device after dev->ax25_ptr is set to null.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Published
2024-06-19T13:35Z
EPSS history
Timeline
  • 19 JUN 13:35Z
    ax25: Fix reference count leak issue of net_device
    cvelistv5