Description
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()
When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 0cac357717168f84d2f75e884a9cff52e6471aaa, < b0a2663ecbe8f65cd3bab2b34dd90156ceb0dbb8; >= 0cac357717168f84d2f75e884a9cff52e6471aaa, < 31de0b70ae5661a407e9d578bbc41de2d83ac25d; >= 0cac357717168f84d2f75e884a9cff52e6471aaa, < f30c7046dfa2748520a8045bb43ed2fbca0373b5; >= 0cac357717168f84d2f75e884a9cff52e6471aaa, < a91c99b1fe5c6f7e52fb932ad9e57ec7cfe913ec |
| Linux | Linux | 5.14 |
References
- https://git.kernel.org/stable/c/31de0b70ae5661a407e9d578bbc41de2d83ac25dPatch
- https://git.kernel.org/stable/c/a91c99b1fe5c6f7e52fb932ad9e57ec7cfe913ecPatch
- https://git.kernel.org/stable/c/b0a2663ecbe8f65cd3bab2b34dd90156ceb0dbb8Patch
- https://git.kernel.org/stable/c/f30c7046dfa2748520a8045bb43ed2fbca0373b5Patch
Timeline
- Published
- Sep 18, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Modified