CVE-2024-38554

ax25: Fix reference count leak issue of net_device

References

Notes

 carnil> Introduced in d01ffb9eee4a ("ax25: add refcount in ax25_dev to avoid UAF
 carnil> bugs"). Vulnerable versions: 4.14.277 4.19.240 5.4.190 5.10.112 5.15.35
 carnil> 5.17-rc3.

Bugs

Status

Branch Status
upstream released (6.10-rc1) [36e56b1b002bb26440403053f19f9e1a8bc075b2]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.9-upstream-stable released (6.9.3) [eef95df9b752699bddecefa851f64858247246e9]
6.6-upstream-stable released (6.6.33) [965d940fb7414b310a22666503d2af69459c981b]
6.1-upstream-stable released (6.1.93) [3ec437f9bbae68e9b38115c4c91de995f73f6bad]
5.10-upstream-stable needed
sid released (6.8.12-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security released (6.1.94-1)
5.10-bullseye-security needed