Riskcovery

CVE-2024-50166

fsl/fman: Fix refcount handling of fman-related devices

State
Published
Severity
5.5 Medium
Published
Nov 7, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fsl/fman: Fix refcount handling of fman-related devices

In mac_probe() there are multiple calls to of_find_device_by_node(), fman_bind() and fman_port_bind() which takes references to of_dev->dev. Not all references taken by these calls are released later on error path in mac_probe() and in mac_remove() which lead to reference leaks.

Add references release.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3933961682a30ae7d405cda344c040a129fea422 to before 5ed4334fc9512f934fe2ae9c4cf7f8142e451b8bAffected
  • 3933961682a30ae7d405cda344c040a129fea422 to before 3c2a3619d565fe16bf59b0a047bab103a2ee4490Affected
  • 3933961682a30ae7d405cda344c040a129fea422 to before 1dec67e0d9fbb087c2ab17bf1bd17208231c3bb1Affected
LinuxLinux
  • 4.5Affected
  • before 4.5Not affected
  • 6.6.59 through 6.6.*Not affected
  • 6.11.6 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.