In the Linux kernel, the following vulnerability has been resolved:
phy: mdio: fix memory leak
Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic.
MDIOBUS_ALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and __mdiobus_register() fails, but device_register() was called
In case of device_register() has been called we should call put_device() to correctly free the memory allocated for this device, but mdiobus_free() calls just kfree(dev) in case of MDIOBUS_ALLOCATED state
To avoid this behaviour we need to set bus->state to MDIOBUS_UNREGISTERED _before_ calling device_register(), because put_device() should be called even in case of device_register() failure.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfo | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-symsUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kernel-preemptUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rt | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-hweUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub