Threats tagged 'ghsa-xqr4-wc4c-36xj'

CVE-2024-44971 is a medium severity vulnerability in the Linux kernel's bcm_sf2 driver within the Distributed Switch Architecture (DSA) subsystem. It involves a memory leak caused by missing reference count decrementing when removing PHY devices in bcm_sf2_mdio_register(). This flaw does not impact confidentiality or integrity but can cause resource exhaustion leading to denial of service. The issue has been fixed by adding the missing phy_device_free() call to properly decrement the device reference count.