PT-2024-35539

CVE-2024-53075

·

تاريخ النشر

2024-10-25

·

تاريخ التحديث

2025-02-28

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns a bad reference count on CPU nodes in the Linux kernel when populating cache leaves. This occurs because when ACPI is enabled, the code takes a specific branch that returns early without calling of node put for the acquired node. To fix this, the initialization of the CPU device node has been moved past the ACPI block to ensure an of node put call for the acquired node, preventing a bad reference count. Additionally, error checking has been added for acquiring the device node to handle cases where it may not be available.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
USN-7276-1
USN-7277-1
USN-7310-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾