Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
staging: vme_user: fix location monitor leak in tsi148 bridge
tsi148_probe() allocates a location monitor resource and links it into tsi148_bridge->lm_resources. The probe error path frees this list, but tsi148_remove() only frees the dma, slave and master resource lists, so the location monitor resource is leaked on device unbind or module unload.
Free the lm_resources list in tsi148_remove() as well, before tsi148_bridge is freed.
Details
- Affected product:
- Debian 10 ELS
- Affected packages:
- linux @ 4.19.0