pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()

Summary

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate propname buffer, we need to drop the reference count we just took. Because the pinctrl_dt_free_maps() includes the droping operation, here we call it directly.

Timeline

1. May 30, 2024, 3:35 PM UTCCVE published
2. Sep 10, 2024, 5:15 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 15, 2026, 12:42 AM UTCRecord last updated

Affected versions

• Linux Linux

  From a988dcd3dd9e691c5ccc3324b209688f3b5453e9 · fixed in 06780473cb8a858d1d6cab2673e021b072a852d1; From 040f726fecd88121f3b95e70369785ad452dddf9 · fixed in 47d253c485491caaf70d8cd8c0248ae26e42581f; From 777430aa4ddccaa5accec6db90ffc1d47f00d471 · fixed in 35ab679e8bb5a81a4f922d3efbd43e32bce69274; From 97e5b508e96176f1a73888ed89df396d7041bfcb · fixed in 76aa2440deb9a35507590f2c981a69a57ecd305d; From 91d5c5060ee24fe8da88cd585bb43b843d2f0dce · fixed in 518d5ddafeb084d6d9b1773ed85164300037d0e6; From 91d5c5060ee24fe8da88cd585bb43b843d2f0dce · fixed in 026e24cf31733dbd97f41cc9bc5273ace428eeec; From 91d5c5060ee24fe8da88cd585bb43b843d2f0dce · fixed in c7e02ccc9fdc496fe51e440e3e66ac36509ca049; From 91d5c5060ee24fe8da88cd585bb43b843d2f0dce · fixed in a0cedbcc8852d6c77b00634b81e41f17f29d9404; From 4.19.267 · fixed in 4.19.314; From 5.4.225 · fixed in 5.4.276; From 5.10.156 · fixed in 5.10.217; From 5.15.80 · fixed in 5.15.159; From 4.9.334 · fixed in 4.10; From 4.14.300 · fixed in 4.15; From 6.0.10 · fixed in 6.1

• Linux Linux

  6.1

• KernelLinux

  fixed in 4.19.314; From 4.20.0 · fixed in 5.4.276; From 5.5.0 · fixed in 5.10.217; From 5.11.0 · fixed in 5.15.159; From 5.16.0 · fixed in 6.1.91; From 6.1.0 · fixed in 6.6.31; From 6.2.0 · fixed in 6.8.10

References 8