Riskcovery

CVE-2024-55639

net: renesas: rswitch: avoid use-after-put for a device tree node

State
Published
Severity
8.4 High
Published
Jan 11, 2025
Updated
Aug 5, 2026
Reserved
Jan 9, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: renesas: rswitch: avoid use-after-put for a device tree node

The device tree node saved in the rswitch_device structure is used at several driver locations. So passing this node to of_node_put() after the first use is wrong.

Move of_node_put() for this node to exit paths.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b46f1e5793298c67efc2f1b917350a2cefacf9d6 to before bf8c6755f02029d1eddc3ff19b870240f054afc7Affected
  • b46f1e5793298c67efc2f1b917350a2cefacf9d6 to before 92007a28f95413058a7268dc84e5f44b700165d1Affected
  • b46f1e5793298c67efc2f1b917350a2cefacf9d6 to before 66b7e9f85b8459c823b11e9af69dbf4be5eb6be8Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.67 through 6.6.*Not affected
  • 6.12.6 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.