In the Linux kernel, the following vulnerability has been resolved:
ax25: Fix reference count leak issue of net_device
There is a reference count leak issue of the object "netdevice" in ax25devdevicedown(). When the ax25 device is shutting down, the ax25devdevicedown() drops the reference count of netdevice one or zero times depending on if we goto unlock_put or not, which will cause memory leak.
In order to solve the above issue, decrease the reference count of netdevice after dev->ax25ptr is set to null.
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bad3a20a27be8d935f2aae08d3c6e743754944a",
"signature_type": "Function",
"target": {
"function": "ax25_dev_device_down",
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-2cca4f6f",
"digest": {
"length": 713.0,
"function_hash": "63359601416000408764084962264138290772"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ec437f9bbae68e9b38115c4c91de995f73f6bad",
"signature_type": "Function",
"target": {
"function": "ax25_dev_device_down",
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-3ef5e2e5",
"digest": {
"length": 689.0,
"function_hash": "280395525290580820242290504150860777208"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36e56b1b002bb26440403053f19f9e1a8bc075b2",
"signature_type": "Line",
"target": {
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-5b98066e",
"digest": {
"line_hashes": [
"210763632476633443848762069095682374552",
"250765487796754958291871956561322569425",
"339244245595103961778272690338796164428",
"291497810622725956980669442789195637394",
"311894815564998738451878948044952379880",
"177517543474388176051356334899095774692",
"21681118459089393162001325715361571720",
"266285865549247275256361470224569473821",
"300232283316707695832923511584136189249",
"15206101591086861467578288139067292207",
"204688897193790750473906001576040002136"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bad3a20a27be8d935f2aae08d3c6e743754944a",
"signature_type": "Line",
"target": {
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-5f6515f1",
"digest": {
"line_hashes": [
"210763632476633443848762069095682374552",
"250765487796754958291871956561322569425",
"339244245595103961778272690338796164428",
"291497810622725956980669442789195637394",
"311894815564998738451878948044952379880",
"177517543474388176051356334899095774692",
"21681118459089393162001325715361571720",
"266285865549247275256361470224569473821",
"300232283316707695832923511584136189249",
"15206101591086861467578288139067292207",
"204688897193790750473906001576040002136"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@965d940fb7414b310a22666503d2af69459c981b",
"signature_type": "Function",
"target": {
"function": "ax25_dev_device_down",
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-6ae19df1",
"digest": {
"length": 713.0,
"function_hash": "63359601416000408764084962264138290772"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36e56b1b002bb26440403053f19f9e1a8bc075b2",
"signature_type": "Function",
"target": {
"function": "ax25_dev_device_down",
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-7937f130",
"digest": {
"length": 713.0,
"function_hash": "63359601416000408764084962264138290772"
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@965d940fb7414b310a22666503d2af69459c981b",
"signature_type": "Line",
"target": {
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-883e3f3a",
"digest": {
"line_hashes": [
"210763632476633443848762069095682374552",
"250765487796754958291871956561322569425",
"339244245595103961778272690338796164428",
"291497810622725956980669442789195637394",
"311894815564998738451878948044952379880",
"177517543474388176051356334899095774692",
"21681118459089393162001325715361571720",
"266285865549247275256361470224569473821",
"300232283316707695832923511584136189249",
"15206101591086861467578288139067292207",
"204688897193790750473906001576040002136"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eef95df9b752699bddecefa851f64858247246e9",
"signature_type": "Line",
"target": {
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-a84b2220",
"digest": {
"line_hashes": [
"210763632476633443848762069095682374552",
"250765487796754958291871956561322569425",
"339244245595103961778272690338796164428",
"291497810622725956980669442789195637394",
"311894815564998738451878948044952379880",
"177517543474388176051356334899095774692",
"21681118459089393162001325715361571720",
"266285865549247275256361470224569473821",
"300232283316707695832923511584136189249",
"15206101591086861467578288139067292207",
"204688897193790750473906001576040002136"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ec437f9bbae68e9b38115c4c91de995f73f6bad",
"signature_type": "Line",
"target": {
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-aa8a0dd8",
"digest": {
"line_hashes": [
"210763632476633443848762069095682374552",
"250765487796754958291871956561322569425",
"339244245595103961778272690338796164428",
"291497810622725956980669442789195637394",
"311894815564998738451878948044952379880",
"177517543474388176051356334899095774692",
"21681118459089393162001325715361571720",
"266285865549247275256361470224569473821",
"300232283316707695832923511584136189249",
"15206101591086861467578288139067292207",
"204688897193790750473906001576040002136"
],
"threshold": 0.9
},
"deprecated": false
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eef95df9b752699bddecefa851f64858247246e9",
"signature_type": "Function",
"target": {
"function": "ax25_dev_device_down",
"file": "net/ax25/ax25_dev.c"
},
"id": "CVE-2024-38554-edceae86",
"digest": {
"length": 713.0,
"function_hash": "63359601416000408764084962264138290772"
},
"deprecated": false
}
]