CVE - CVE-2024-38554

CVE-ID
CVE-2024-38554	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of net_device There is a reference count leak issue of the object "net_device" in ax25_dev_device_down(). When the ax25 device is shutting down, the ax25_dev_device_down() drops the reference count of net_device one or zero times depending on if we goto unlock_put or not, which will cause memory leak. In order to solve the above issue, decrease the reference count of net_device after dev->ax25_ptr is set to null.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/36e56b1b002bb26440403053f19f9e1a8bc075b2 URL:https://git.kernel.org/stable/c/36e56b1b002bb26440403053f19f9e1a8bc075b2 MISC:https://git.kernel.org/stable/c/3ec437f9bbae68e9b38115c4c91de995f73f6bad URL:https://git.kernel.org/stable/c/3ec437f9bbae68e9b38115c4c91de995f73f6bad MISC:https://git.kernel.org/stable/c/8bad3a20a27be8d935f2aae08d3c6e743754944a URL:https://git.kernel.org/stable/c/8bad3a20a27be8d935f2aae08d3c6e743754944a MISC:https://git.kernel.org/stable/c/965d940fb7414b310a22666503d2af69459c981b URL:https://git.kernel.org/stable/c/965d940fb7414b310a22666503d2af69459c981b MISC:https://git.kernel.org/stable/c/eef95df9b752699bddecefa851f64858247246e9 URL:https://git.kernel.org/stable/c/eef95df9b752699bddecefa851f64858247246e9
Assigning CNA
kernel.org
Date Record Created
20240618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)