In the Linux kernel, the following vulnerability has been resolved:
MIPS: vpe-mt: fix possible memory leak while module exiting
Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, it need be freed when module exiting, call put_device() to give up reference, so that it can be freed in kobject_cleanup() when the refcount hit to 0. The vpe_device is static, so remove kfree() from vpe_device_release().
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 2.6.30 | 4.9.337 |
| linux / linux_kernel | 4.10 | 4.14.303 |
| linux / linux_kernel | 4.15 | 4.19.270 |
| linux / linux_kernel | 4.20 | 5.4.229 |
| linux / linux_kernel | 5.5 | 5.10.163 |
| linux / linux_kernel | 5.11 | 5.15.86 |
| linux / linux_kernel | 5.16 | 6.0.16 |
| linux / linux_kernel | 6.1 | 6.1.2 |