PT-2024-33998 · Linux+5 · Linux Kernel+5
Published
2024-10-15
·
Updated
2026-05-26
·
CVE-2024-50166
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
A reference leak issue has been identified in the Linux kernel, specifically in the fsl/fman part. The problem arises in the mac probe() function, where multiple calls to of find device by node(), fman bind(), and fman port bind() take references to of dev->dev without releasing all of them later on the error path in mac probe() and in mac remove(), leading to reference leaks.
Recommendations:
For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the fsl/fman device handling until a patch is available.
Exploit
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu