In the Linux kernel, the following vulnerability has been resolved:
phy: mdio: fix memory leak
Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic.
MDIOBUS_ALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and __mdiobus_register() fails, but device_register() was called
In case of device_register() has been called we should call put_device() to correctly free the memory allocated for this device, but mdiobus_free() calls just kfree(dev) in case of MDIOBUS_ALLOCATED state
To avoid this behaviour we need to set bus->state to MDIOBUS_UNREGISTERED _before_ calling device_register(), because put_device() should be called even in case of device_register() failure.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-tools-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-obs-qa | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-raspiUpgrade linux-azureUpgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-hweUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-gcp | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub