CVE-2024-46767

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: phy: Fix missing of_node_put() for leds

The call of of_get_child_by_name() will cause refcount incremented for leds, if it succeeds, it should call of_node_put() to decrease it, fix it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux01e5b728e9e43ae444e0369695a5f72209906464 < 26928c8f00f6bb0e194f3957fe51c69d36838eb2affected
LinuxLinux01e5b728e9e43ae444e0369695a5f72209906464 < d9c8dbbc236cdc6231ee91cdede2fc97b430cfffaffected
LinuxLinux01e5b728e9e43ae444e0369695a5f72209906464 < 2560db6ede1aaf162a73b2df43e0b6c5ed8819f7affected
LinuxLinux6.4affected
LinuxLinux0 < 6.4unaffected
LinuxLinux6.6.51 <= 6.6.*unaffected
LinuxLinux6.10.10 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References