In the Linux kernel, the following vulnerability has been resolved:
spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()
pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak here. Fix it by replacing it with pm_runtime_resume_and_get to keep usage counter balanced.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-preempt-devel | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-awsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-oracle-5.4 | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub