Описание
In the Linux kernel, the following vulnerability has been resolved:
ARM: OMAP2+: omap4-common: Fix refcount leak bug
In omap4_sram_init(), of_find_compatible_node() will return a node
pointer with refcount incremented. We should use of_node_put() when
it is not used anymore.
A reference leak flaw was found in the Linux kernel's OMAP4 platform code in the SRAM initialization logic. A local user on ARM OMAP4 systems can trigger this issue during system initialization when of_find_compatible_node returns a device tree node pointer with an incremented reference count that is never released. This results in a permanent reference leak preventing proper device tree node cleanup and leading to resource exhaustion or denial of service.
Отчет
The omap4_sram_init function uses of_find_compatible_node to locate compatible device tree nodes for SRAM configuration. This function increments the node's reference count when returning a match, requiring the caller to balance this with of_node_put when finished. The OMAP4 code fails to release this reference after using the node, violating device tree reference counting conventions. While this occurs during early boot initialization rather than runtime, the leaked reference persists for the system's lifetime and represents a resource management violation. The issue affects ARM OMAP4 platforms, which are primarily embedded systems and older mobile devices.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: omap4-common: Fix refcount leak bug In omap4_sram_init(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.
In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: omap4-common: Fix refcount leak bug In omap4_sram_init(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.
In the Linux kernel, the following vulnerability has been resolved: A ...
In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: omap4-common: Fix refcount leak bug In omap4_sram_init(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.
Уязвимость функции omap4_sram_init() модуля arch/arm/mach-omap2/omap4-common.c поддержки платформы ARM ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5.5 Medium
CVSS3