https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:43:03 +0000 https://vulnerability.circl.lu/vuln/cve-2024-53075 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>riscv: Prevent a bad reference count on CPU nodes</p> <p>When populating cache leaves we previously fetched the CPU device node at the very beginning. But when ACPI is enabled we go through a specific branch which returns early and does not call &#39;of_node_put&#39; for the node that was acquired.</p> <p>Since we are not using a CPU device node for the ACPI code anyways, we can simply move the initialization of it just passed the ACPI block, and we are guaranteed to have an &#39;of_node_put&#39; call for the acquired node. This prevents a bad reference count of the CPU device node.</p> <p>Moreover, the previous function did not check for errors when acquiring the device node, so a return -ENOENT has been added for that case.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>riscv: Prevent a bad reference count on CPU nodes</p> <p>When populating cache leaves we previously fetched the CPU device node at the very beginning. But when ACPI is enabled we go through a specific branch which returns early and does not call &#39;of_node_put&#39; for the node that was acquired.</p> <p>Since we are not using a CPU device node for the ACPI code anyways, we can simply move the initialization of it just passed the ACPI block, and we are guaranteed to have an &#39;of_node_put&#39; call for the acquired node. This prevents a bad reference count of the CPU device node.</p> <p>Moreover, the previous function did not check for errors when acquiring the device node, so a return -ENOENT has been added for that case.</p> https://vulnerability.circl.lu/vuln/cve-2024-53075