In the Linux kernel, the following vulnerability has been resolved:
spi: uniphier: fix reference count leak in uniphier_spi_probe()
The issue happens in several error paths in uniphier_spi_probe(). When either dma_get_slave_caps() or devm_spi_register_master() returns an error code, the function forgets to decrease the refcount of both `dma_rx` and `dma_tx` objects, which may lead to refcount leaks.
Fix it by decrementing the reference count of specific objects in those error paths.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-devel | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub