CVE-2024-46767: net: phy: Fix missing of_node_put() for leds
In the Linux kernel, the following vulnerability has been resolved:
net: phy: Fix missing ofnodeput() for leds
The call of ofgetchildbyname() will cause refcount incremented for leds, if it succeeds, it should call ofnodeput() to decrease it, fix it.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46767?
CVE-2024-46767 is considered to have a medium severity due to its impact on kernel stability.
How do I fix CVE-2024-46767?
To fix CVE-2024-46767, update the Linux kernel to one of the fixed versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.16-1.
What software is affected by CVE-2024-46767?
CVE-2024-46767 affects the Linux kernel versions specified in the remedy section for Debian-based distributions.
Is CVE-2024-46767 related to security exploits?
CVE-2024-46767 is related to a code refcounting issue that can lead to kernel instability, which may indirectly enable exploitation.
When was CVE-2024-46767 disclosed?
CVE-2024-46767 was disclosed as part of ongoing kernel updates and fixes, reflecting continuous security enhancements.