Riskcovery

CVE-2024-36955

ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()

State
Published
Severity
7.7 High
Published
May 30, 2024
Updated
May 11, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()

The documentation for device_get_named_child_node() mentions this important point:

" The caller is responsible for calling fwnode_handle_put() on the returned fwnode pointer. "

Add fwnode_handle_put() to avoid a leaked reference.

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HCISA-ADP

Weaknesses

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

ProductVersions
LinuxLinux
  • 08c2a4bc9f2acaefbd0158866db5cb3238a68674 to before bd2d9641a39e6b5244230c4b41c4aca83b54b377Affected
  • 08c2a4bc9f2acaefbd0158866db5cb3238a68674 to before 722d33c442e66e4aabd3e778958d696ff3a2777eAffected
  • 08c2a4bc9f2acaefbd0158866db5cb3238a68674 to before 7db626d2730d3d80fd31638169054b1e507f07bfAffected
  • 08c2a4bc9f2acaefbd0158866db5cb3238a68674 to before 7ef6ecf98ce309b1f4e5a25cddd5965d01feea07Affected
  • 08c2a4bc9f2acaefbd0158866db5cb3238a68674 to before c158cf914713efc3bcdc25680c7156c48c12ef6aAffected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 5.15.159 through 5.15.*Not affected
  • 6.1.91 through 6.1.*Not affected
  • 6.6.31 through 6.6.*Not affected
  • 6.8.10 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.