PT-2024-33852 · Linux+7 · Linux Kernel+7
Published
2024-10-21
·
Updated
2026-05-26
·
CVE-2024-50012
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A vulnerability in the Linux kernel's cpufreq function has been resolved. The issue occurred in the parse perf domain function, where a bad reference count on the CPU node could happen if the call to of parse phandle with args returned an error. This would cause the reference to the CPU device node to not be properly decremented. The problem was addressed by declaring the variable with the free(device node) cleanup attribute.
Recommendations:
For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider applying the patch that declares the variable with the free(device node) cleanup attribute to prevent incorrect reference counts on CPU nodes.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu