Linux Kernel Chameleon Bus Error Handling Vulnerability in MCB Device Registration

A vulnerability in the Linux kernel's handling of the MEN Chameleon Bus has been addressed. The issue arose in the 'chameleon_parse_gdd()' function, where an error returned by 'mcb_device_register()' led to a reference count leak of the bus and device names. This leak was resolved by calling 'put_device()' to release the reference, allowing for proper cleanup in 'mcb_release_dev()' and 'kobject_cleanup()'.

Impact

The vulnerability could lead to a memory leak by not properly releasing references, potentially causing increased memory usage or exhaustion.

Reproduction

The vulnerability can be reproduced by registering a device on the MEN Chameleon Bus and simulating an error response from the 'mcb_device_register()' function. This will trigger the reference count leak by not properly releasing the bus and device name references.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.