Description
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
If we fail to allocate propname buffer, we need to drop the reference count we just took. Because the pinctrl_dt_free_maps() includes the droping operation, here we call it directly.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= a988dcd3dd9e691c5ccc3324b209688f3b5453e9, < 06780473cb8a858d1d6cab2673e021b072a852d1; >= 040f726fecd88121f3b95e70369785ad452dddf9, < 47d253c485491caaf70d8cd8c0248ae26e42581f; >= 777430aa4ddccaa5accec6db90ffc1d47f00d471, < 35ab679e8bb5a81a4f922d3efbd43e32bce69274; >= 97e5b508e96176f1a73888ed89df396d7041bfcb, < 76aa2440deb9a35507590f2c981a69a57ecd305d; >= 91d5c5060ee24fe8da88cd585bb43b843d2f0dce, < 518d5ddafeb084d6d9b1773ed85164300037d0e6; >= 91d5c5060ee24fe8da88cd585bb43b843d2f0dce, < 026e24cf31733dbd97f41cc9bc5273ace428eeec; >= 91d5c5060ee24fe8da88cd585bb43b843d2f0dce, < c7e02ccc9fdc496fe51e440e3e66ac36509ca049; >= 91d5c5060ee24fe8da88cd585bb43b843d2f0dce, < a0cedbcc8852d6c77b00634b81e41f17f29d9404; aaf552c5d53abe4659176e099575fe870d2e4768; b4d9f55cd38435358bc16d580612bc0d798d7b4c; 5834a3a98cd266ad35a229923c0adbd0addc8d68; >= 4.19.267, < 4.19.314; >= 5.4.225, < 5.4.276; >= 5.10.156, < 5.10.217; >= 5.15.80, < 5.15.159; >= 4.9.334, < 4.10; >= 4.14.300, < 4.15; >= 6.0.10, < 6.1 |
| Linux | Linux | 6.1 |
| Siemens | RUGGEDCOM RST2428P | < V3.1 |
| Siemens | SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | — |
| Siemens | SCALANCE XCM-/XRM-/XCH-/XRH-300 family | < V3.1 |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | < V1.1.1 |
References
- https://git.kernel.org/stable/c/026e24cf31733dbd97f41cc9bc5273ace428eeecPatch
- https://git.kernel.org/stable/c/06780473cb8a858d1d6cab2673e021b072a852d1Patch
- https://git.kernel.org/stable/c/35ab679e8bb5a81a4f922d3efbd43e32bce69274Patch
- https://git.kernel.org/stable/c/47d253c485491caaf70d8cd8c0248ae26e42581fPatch
- https://git.kernel.org/stable/c/518d5ddafeb084d6d9b1773ed85164300037d0e6Patch
- https://git.kernel.org/stable/c/76aa2440deb9a35507590f2c981a69a57ecd305dPatch
- https://git.kernel.org/stable/c/a0cedbcc8852d6c77b00634b81e41f17f29d9404Patch
- https://git.kernel.org/stable/c/c7e02ccc9fdc496fe51e440e3e66ac36509ca049Patch
- https://git.kernel.org/stable/c/026e24cf31733dbd97f41cc9bc5273ace428eeecPatch
- https://git.kernel.org/stable/c/06780473cb8a858d1d6cab2673e021b072a852d1Patch
- https://git.kernel.org/stable/c/35ab679e8bb5a81a4f922d3efbd43e32bce69274Patch
- https://git.kernel.org/stable/c/47d253c485491caaf70d8cd8c0248ae26e42581fPatch
- https://git.kernel.org/stable/c/518d5ddafeb084d6d9b1773ed85164300037d0e6Patch
- https://git.kernel.org/stable/c/76aa2440deb9a35507590f2c981a69a57ecd305dPatch
- https://git.kernel.org/stable/c/a0cedbcc8852d6c77b00634b81e41f17f29d9404Patch
- https://git.kernel.org/stable/c/c7e02ccc9fdc496fe51e440e3e66ac36509ca049Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.htmlMailing List
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlMailing List
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
Timeline
- Published
- May 30, 2024
- Last modified
- Oct 15, 2026
- NVD status
- Modified