PT-2025-3134 · Linux+3 · Linux Kernel+3
Published
2024-12-08
·
Updated
2025-05-29
·
CVE-2024-55639
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A vulnerability in the Linux kernel has been resolved, related to the use of a device tree node in the rswitch device structure. The issue arises from passing the node to of node put() after its first use, which is incorrect because the node is used at several driver locations. To fix this, of node put() for the node is moved to exit paths.
Recommendations
For versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider modifying the driver to avoid the use-after-put condition by moving of node put() to exit paths, similar to the fix applied in version 6.6.74.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Suse
Ubuntu