CVE-2024-46767

net: phy: Fix missing of_node_put() for leds

State
Published
Severity
Not scored
Published
Sep 18, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: phy: Fix missing of_node_put() for leds

The call of of_get_child_by_name() will cause refcount incremented for leds, if it succeeds, it should call of_node_put() to decrease it, fix it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 01e5b728e9e43ae444e0369695a5f72209906464 to before 26928c8f00f6bb0e194f3957fe51c69d36838eb2Affected
  • 01e5b728e9e43ae444e0369695a5f72209906464 to before d9c8dbbc236cdc6231ee91cdede2fc97b430cfffAffected
  • 01e5b728e9e43ae444e0369695a5f72209906464 to before 2560db6ede1aaf162a73b2df43e0b6c5ed8819f7Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.