Linux kernel
cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*
A vulnerability in the Linux kernel's Arizona MFD driver has been addressed. The issue was a reference count leak in the function 'arizona_clk32k_enable()'. The vulnerability arose because the function used 'pm_runtime_get_sync()', which improperly increased the reference count even when an error occurred. This leak could potentially lead to resource management issues.
The vulnerability could cause a reference count leak, leading to improper resource management.
The vulnerability can be reproduced by calling the 'arizona_clk32k_enable()' function in the Arizona MFD driver. The function will use 'pm_runtime_get_sync()', which increases the reference count incorrectly, even when it returns an error. This behavior creates a reference count leak that can be exploited.
The vulnerability has been fixed by changing the function to use 'pm_runtime_resume_and_get()', which correctly manages the reference count. Users should update to the latest version of the Linux kernel where this fix has been applied.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.