References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

In the Linux kernel, the following vulnerability has been resolved:

USB: dwc3: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.

Note, the root dentry for the debugfs directory for the device needs to
be saved so we don't have to keep looking it up, which required a bit
more refactoring to properly create and remove it when needed.

https://git.kernel.org/stable/c/bab872b638130a18fd54d9adfad7db77ed6457be

https://git.kernel.org/stable/c/be308d68785b205e483b3a0c61ba3a82da468f2c

https://git.kernel.org/stable/c/ce234af49d103d95e3fdca59b25e0d0242f41bb4

https://git.kernel.org/stable/c/cf52c320cf74245ce1c12b0bd48f77b87d77fbc9