CVE-2024-38603

CVSS v3.1 5.5 (Medium)

EPSS 0.04 % (5^th)

Affected Products 1

Advisories 11

NVD Status Analyzed

In the Linux kernel, the following vulnerability has been resolved:

drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()

pci_alloc_irq_vectors() allocates an irq vector. When devm_add_action()
fails, the irq vector is not freed, which leads to a memory leak.

Replace the devm_add_action with devm_add_action_or_reset to ensure
the irq vector can be destroyed when it fails.

	CPE23	From	Up To
Linux Kernel from 6.0 version and prior 6.1.93 version	cpe:2.3:o:linux:linux_kernel	>= 6.0	< 6.1.93
Linux Kernel from 6.2 version and prior 6.6.33 version	cpe:2.3:o:linux:linux_kernel	>= 6.2	< 6.6.33
Linux Kernel from 6.7 version and prior 6.8.12 version	cpe:2.3:o:linux:linux_kernel	>= 6.7	< 6.8.12
Linux Kernel from 6.9 version and prior 6.9.3 version	cpe:2.3:o:linux:linux_kernel	>= 6.9	< 6.9.3