-

CVE-2022-50624

net: netsec: fix error handling in netsec_register_mdio()

In the Linux kernel, the following vulnerability has been resolved:

net: netsec: fix error handling in netsec_register_mdio()

If phy_device_register() fails, phy_device_free() need be called to
put refcount, so memory of phy device and device name can be freed
in callback function.

If get_phy_device() fails, mdiobus_unregister() need be called,
or it will cause warning in mdiobus_free() and kobject is leaked.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 533dd11a12f698c571a12271b20f235792d3e148
Version < 728884b22d83148a330b23f9472f1e118b589211
Status affected
Version 533dd11a12f698c571a12271b20f235792d3e148
Version < fda2d07234a21be4d71ebfe97a45f499726902d6
Status affected
Version 533dd11a12f698c571a12271b20f235792d3e148
Version < 62f0a08e82a6312efd7df7f595c0b11d4ffde610
Status affected
Version 533dd11a12f698c571a12271b20f235792d3e148
Version < 1e0bee973ef6fc3c1e3acb014515eaea37c8fa17
Status affected
Version 533dd11a12f698c571a12271b20f235792d3e148
Version < 846e677daf51220d7975c61a20e440a88473951e
Status affected
Version 533dd11a12f698c571a12271b20f235792d3e148
Version < 94423589689124e8cd145b38a1034be7f25835b2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.16
Status affected
Version 0
Version < 4.16
Status unaffected
Version <= 4.19.*
Version 4.19.264
Status unaffected
Version <= 5.4.*
Version 5.4.223
Status unaffected
Version <= 5.10.*
Version 5.10.153
Status unaffected
Version <= 5.15.*
Version 5.15.77
Status unaffected
Version <= 6.0.*
Version 6.0.7
Status unaffected
Version <= *
Version 6.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.084
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.