In the Linux kernel, the following vulnerability has been resolved:
i2c: cadence: fix reference leak when pm_runtime_get_sync fails
The PM reference count is not expected to be incremented on return in functions cdns_i2c_master_xfer and cdns_reg_slave.
However, pm_runtime_get_sync will increment pm usage counter even failed. Forgetting to putting operation will result in a reference leak here.
Replace it with pm_runtime_resume_and_get to keep usage counter balanced.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-64kb | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub