In the Linux kernel, the following vulnerability has been resolved:
spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()
pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak here. Fix it by replacing it with pm_runtime_resume_and_get to keep usage counter balanced.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade reiserfs-kmp-default | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linuxUpgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-bluefield | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub