Riskcovery

CVE-2024-57887

drm: adv7511: Fix use-after-free in adv7533_attach_dsi()

State
Published
Severity
7.8 High
Published
Jan 15, 2025
Updated
Aug 5, 2026
Reserved
Jan 11, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm: adv7511: Fix use-after-free in adv7533_attach_dsi()

The host_node pointer was assigned and freed in adv7533_parse_dt(), and later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue by dropping of_node_put() in adv7533_parse_dt() and calling of_node_put() in error path of probe() and also in the remove().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 1e4d58cd7f888522d16f221d628356befbb08468 to before acec80d9f126cd3fa764bbe3d96bc0cb5cd2b087Affected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to before d208571943ffddc438a7ce533d5d0b9219806242Affected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to before 1f49aaf55652580ae63ab83d67211fe6a55d83dcAffected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to before ca9d077350fa21897de8bf64cba23b198740aab5Affected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to before 81adbd3ff21c1182e06aa02c6be0bfd9ea02d8e8Affected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 5.10.234 through 5.10.*Not affected
  • 6.1.125 through 6.1.*Not affected
  • 6.6.70 through 6.6.*Not affected
  • 6.12.9 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.