Vulnerability feed

Executive summary

A resource leak in the Linux kernel's ThunderX network driver (nicvf_probe) could leave a PTP device reference held after certain initialization failures. The advisory does not state a severity rating or any exploitation details, and it describes the change as a fix that adds a common error path to release the reference.

Technical summary

This is a reference leak (CWE-style resource management flaw) in the thunderx nicvf_probe() function: cavium_ptp_get() takes a reference to a PTP PCI device via pci_get_device(), and if a later initialization step fails, that reference was not released. The fix adds an err_put_ptp error path that calls cavium_ptp_put() and changes the pci_enable_device() failure path to jump to it. The advisory does not state a CVSS score, attack vector, preconditions for triggering the leak, affected version ranges, fixed kernel version numbers, workarounds, or detection guidance. The advisory references a patch commit (2bcf59eefb9f00a2b1d426b639ee49c305a80695) but does not list affected or fixed release versions.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/2bcf59eefb9f00a…26b639ee49c305a80695

Score

No CVSS score published.

Affects

LinuxCaviumLinuxLinux kernelCavium ThunderX