CVE-2024-50166

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: A reference leak issue has been identified in the Linux kernel, specifically in the fsl/fman part. The problem arises in the mac probe() function, where multiple calls to of find device by node(), fman bind(), and fman port bind() take references to of dev->dev without releasing all of them later on the error path in mac probe() and in mac remove(), leading to reference leaks.

Recommendations: For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the fsl/fman device handling until a patch is available.