In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function devl_rate_nodes_destroy is documented to "Unset paren…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function devl_rate_nodes_destroy is documented to "Unset parent for all rate objects". However, it was only calling the driver-specific `rate_leaf_parent_set` or `rate_node_parent_set` ops and decrementing the parent's refcount, without actually setting the `devlink_rate->parent` pointer to NULL. This leaves a dangling pointer in the `devlink_rate` struct, wh…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/542f45486f1ce2d2dde75bd85aca0389ef7046c3 Patch
- https://git.kernel.org/stable/c/715d9cda646a8a38ea8b2bb5afb679a7464055e2 Patch
- https://git.kernel.org/stable/c/90e51e20bcec9bff5b2421ce1bd95704764655f5 Patch
- https://git.kernel.org/stable/c/c70df6c17d389cc743f0eb30160e2d6bc6910db8 Patch
- https://git.kernel.org/stable/c/f94c1a114ac209977bdf5ca841b98424295ab1f0 Patch
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html
Timeline
- nvd_ingest NVD