Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
created 3 weeks, 4 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion
riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node. However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak. Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.

Affected products

Linux
  • <36e4843fe39ea2f17f4de6d59fba26271916c184
  • <f322955d9a1c344ed943752f05aacea7bc22e025
  • <51afb7da697b698996351740b4f39fb05ce2afd4
  • <2560c97f63bb99b26d9f19b23a4f66ea24c9dc14
  • =<6.6.*
  • =<*
  • ==5.0
  • <bf4a195f063b0a0805c1417f6aad1dd32ea48f0f
  • <880ac50b0bfae06d7ab5f1843253adfb86aa173a
  • <5.0
  • =<6.18.*
  • =<6.12.*
  • =<7.1.*
  • =<6.1.*