Riskcovery

CVE-2024-58003

media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()

State
Published
Severity
7.8 High
Published
Feb 27, 2025
Updated
Aug 5, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()

The ub913 and ub953 drivers call fwnode_handle_put(priv->sd.fwnode) as part of their remove process, and if the driver is removed multiple times, eventually leads to put "overflow", possibly causing memory corruption or crash.

The fwnode_handle_put() is a leftover from commit 905f88ccebb1 ("media: i2c: ds90ub9x3: Fix sub-device matching"), which changed the code related to the sd.fwnode, but missed removing these fwnode_handle_put() calls.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to before 474d7baf91d37bc411fa60de5bbf03c9dd82e18aAffected
  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to before f4e4373322f8d4c19721831f7fb989e52d30dab0Affected
  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to before 70743d6a8b256225675711e7983825f1be86062dAffected
  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to before 60b45ece41c5632a3a3274115a401cb244180646Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.78 through 6.6.*Not affected
  • 6.12.14 through 6.12.*Not affected
  • 6.13.3 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.