Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Biju Das

Researcher fromRenesas
#32979of 53,632
7.8Total CVSS
Vulnerabilities · 1
PT-2025-3612
7.8
2024-12-20
Linux · Linux Kernel · CVE-2024-57887
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.74 **Description** A use-after-free issue was found in the Linux kernel, specifically in the `adv7533 attach dsi()` function. The `host node` pointer was assigned and freed in `adv7533 parse dt()`, and later used in `adv7533 attach dsi()`. This issue was resolved by removing `of node put()` in `adv7533 parse dt()` and calling `of node put()` in the error path of `probe()` and also in `remove()`. **Recommendations** For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the `adv7533 attach dsi()` function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the `host node` pointer in the affected code path until the issue is resolved.