In the Linux kernel, the following vulnerability has been resolved:
phy: mdio: fix memory leak
Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic.
MDIOBUS_ALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and __mdiobus_register() fails, but device_register() was called
In case of device_register() has been called we should call put_device() to correctly free the memory allocated for this device, but mdiobus_free() calls just kfree(dev) in case of MDIOBUS_ALLOCATED state
To avoid this behaviour we need to set bus->state to MDIOBUS_UNREGISTERED _before_ calling device_register(), because put_device() should be called even in case of device_register() failure.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf-debuginfo | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-azureUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade dtb-lgUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-preemptUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-azure-4.15Upgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-gcp-4.15Upgrade linux-oracle-5.4Upgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub