In the Linux kernel, the following vulnerability has been resolved:
phy: mdio: fix memory leak
Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic.
MDIOBUS_ALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and __mdiobus_register() fails, but device_register() was called
In case of device_register() has been called we should call put_device() to correctly free the memory allocated for this device, but mdiobus_free() calls just kfree(dev) in case of MDIOBUS_ALLOCATED state
To avoid this behaviour we need to set bus->state to MDIOBUS_UNREGISTERED _before_ calling device_register(), because put_device() should be called even in case of device_register() failure.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-livepatch-4.14.252-195.481Upgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-headersUpgrade perf-debuginfo | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade dtb-alteraUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-debug-develUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-preemptUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-default | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linux-gkeopUpgrade linuxUpgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-4.15 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub