clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 11 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe Smatch reports: drivers/clocksource/timer-cadence-ttc.c:529 ttc_timer_probe() warn: 'timer_baseaddr' from of_iomap() not released on lines: 498,508,516. timer_baseaddr may have the problem of not being released after use, I replaced it with the devm_of_iomap() function and added the clk_put() function to cleanup the "clk_ce" and "clk_cs".
Références
- https://git.kernel.org/stable/c/e0a9cc90ea44a50d76a84f9f9bf1703d31fe45e9
- https://git.kernel.org/stable/c/54cc10a0f4b01b522e9519014200f1b33bf7e4aa
- https://git.kernel.org/stable/c/ebdff0986513a29be242aace0ef89b6c105b0bf0
- https://git.kernel.org/stable/c/289e2054eeb63c9e133960731c342eeffad218d3
- https://git.kernel.org/stable/c/919dd531ebb7514f205ae7aab87994337ebce1f6
- https://git.kernel.org/stable/c/67d7eebbc424935dec61fb352d1ccae5d16cf429
- https://git.kernel.org/stable/c/99744200f28b2cf5f50767447e51b4b4a977d145
- https://git.kernel.org/stable/c/8b5bf64c89c7100c921bd807ba39b2eb003061ab
Références européennes
- ENISA EUVD · EUVD-2023-60003
- GCVE · GCVE-0-2023-53725
Avis du CERT-FR
- CERTFR-2025-AVI-1073 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-1047 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-1032 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-1009 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected e932900a3279b5dbb6d8f43c7b369003620e137c < e0a9cc90ea44a50d76a84f9f9bf1703d31fe45e9 ; affected e932900a3279b5dbb6d8f43c7b369003620e137c < 54cc10a0f4b01b522e9519014200f1b33bf7e4aa ; affected e932900a3279b5dbb6d8f43c7b369003620e137c < ebdff0986513a29be242aace0ef89b6c105b0bf0 ; affected e932900a3279b5dbb6d8f43c7b369003620e137c < 289e2054eeb63c9e133960731c342eeffad218d3 ; affected e932900a3279b5dbb6d8f43c7b369003620e137c < 919dd531ebb7514f205ae7aab87994337ebce1f6 ; affected e932900a3279b5dbb6d8f43c7b369003620e137c < 67d7eebbc424935dec61fb352d1ccae5d16cf429 |
| Linux · Linux | affected 3.10 ; unaffected 0 < 3.10 ; unaffected 4.19.291 ≤ 4.19.* ; unaffected 5.4.251 ≤ 5.4.* ; unaffected 5.10.188 ≤ 5.10.* ; unaffected 5.15.121 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |