CVE-2024-38554

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak issue exists in the ax25 dev device down() function, which can cause a memory leak when the ax25 device is shutting down. The issue arises because the ax25 dev device down() function drops the reference count of net device one or zero times, depending on whether it goes to unlock put or not. To solve this issue, the reference count of net device should be decreased after dev->ax25 ptr is set to null.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.