i2c: cadence: fix reference leak when pm_runtime_get_sync fails
Published Feb 28, 2024
5.5
MEDIUMCVSS 3.1
EPSS 0.22%
Description
The PM reference count is not expected to be incremented on return in functions cdns_i2c_master_xfer and cdns_reg_slave.
However, pm_runtime_get_sync will increment pm usage counter even failed. Forgetting to putting operation will result in a reference leak here.
Replace it with pm_runtime_resume_and_get to keep usage counter balanced.
Affected products
-
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version
-
- Version 4.5StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<4.5
- Version 5.10.37StatusunaffectedConstraints<=5.10.*
- Version 5.11.21StatusunaffectedConstraints<=5.11.*
- Version 5.12.4StatusunaffectedConstraints<=5.12.*
- Version 5.13StatusunaffectedConstraints<=*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
- ≥ 4.5 · < 5.10.37
- ≥ 5.11 · < 5.11.21
- ≥ 5.12 · < 5.12.4
No data.
Red Hat Enterprise Linux 6
kernel
Out of support scope
Red Hat Enterprise Linux 7
kernel
Out of support scope
Red Hat Enterprise Linux 7
kernel-rt
Out of support scope
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (10)
- https://access.redhat.com/security/cve/CVE-2020-36784 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2266952 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-24225 Advisory
- https://git.kernel.org/stable/c/23ceb8462dc6f4b4decdb5536a7e5fc477cdf0b6 Patch
- https://git.kernel.org/stable/c/30410519328c94367e561fd878e5f0d3a0303585 Patch
- https://git.kernel.org/stable/c/a45fc41beed8e0fe31864619c34aa00797fb60c1 Patch
- https://git.kernel.org/stable/c/d57ff04e0ed6f3be1682ae861ead33f879225e07 Patch
- https://lore.kernel.org/linux-cve-announce/2024022821-CVE-2020-36784-a266@gregkh/T/#u
- https://nvd.nist.gov/vuln/detail/CVE-2020-36784
- https://www.cve.org/CVERecord?id=CVE-2020-36784
Change history (0)
No recorded changes yet.