net: macb: destroy the phylink instance on the probe error path
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macb_mii_init() creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macb_alloc_tieoff() or register_netdev() leaks the instance. Destroy it at err_out_unregister_mdio, which is only reachable once macb_mii_init() has succeeded, so bp->phylink is valid there.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 · fixed in 0112aa02c7847314be599d68783d50c7e228a694; From 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 · fixed in c1de1e7b51ab2531f564b39b51998c3d71caccd7; From 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 · fixed in 23b6a44ffea1c54a4232aa86ee470b21422a8cc5; From 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 · fixed in e92a45b872b035c79acde8dd0da096a72b61ff2f; From 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 · fixed in 8558e3195664113c14a4d8fcf221b3caff41fed1; From 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 · fixed in 7d059f390750152b9bd69df934198651b94fc26d
- Linux Linux
5.5
- KernelLinux
From 5.5.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7