PT-2026-98693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bcm sf2 cfp rule get all function where the cfp.unique bitmap is processed into rule locs without verifying the nfc-rule cnt variable, which defines the available...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: dsa: bcmsf2: Fixed a possible memory leak in bcmsf2mdioregister. The bcmsf2mdioregister function calls ofPhyFindDevice and then phydeviceRemove in a loop to remove existing PHY devices. ofPhyFindDevice eventually calls...

SUSE CVE-2024-44971

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: Fix a possible memory leak in bcmsf2mdioregister bcmsf2mdioregister calls ofphyfinddevice and then phydeviceremove in a loop to remove existing PHY devices. ofphyfinddevice eventually calls busfinddevice, which...

DEBIAN-CVE-2024-44971

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: Fix a possible memory leak in bcmsf2mdioregister bcmsf2mdioregister calls ofphyfinddevice and then phydeviceremove in a loop to remove existing PHY devices. ofphyfinddevice eventually calls busfinddevice, which...

PT-2024-31338

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A memory leak vulnerability has been resolved in the Linux kernel. The issue occurs in the bcm sf2 mdio register function, which calls of phy find device and then phy device remove in a loop to...

SUSE CVE-2022-48815

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: don't use devres for mdiobus As explained in commits: 74b6d7d13307 "net: dsa: realtek: register the MDIO bus under devres" 5135e96a3dd2 "net: dsa: don't allocate the slavemiibus using devres" mdiobusfree will...

DEBIAN-CVE-2022-48815

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: don't use devres for mdiobus As explained in commits: 74b6d7d13307 "net: dsa: realtek: register the MDIO bus under devres" 5135e96a3dd2 "net: dsa: don't allocate the slavemiibus using devres" mdiobusfree will...

UBUNTU-CVE-2022-48815

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: don't use devres for mdiobus As explained in commits: 74b6d7d13307 "net: dsa: realtek: register the MDIO bus under devres" 5135e96a3dd2 "net: dsa: don't allocate the slavemiibus using devres" mdiobusfree will...

PT-2024-10529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to errors in resource management in the Linux kernel's net component. It may allow an attacker to cause a denial of service. The problem occurs when mdiobus free is...