PT-2025-8825 · Linux+3 · Linux Kernel+3

Tomi Valkeinen · Published 2024-12-06 · Updated 2026-04-20 · CVE-2024-58003

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified, specifically in the media: i2c: ds90ub9x3 module. The ub913 and ub953 drivers call fwnode handle put(priv->sd.fwnode) as part of their remove process. If the driver is removed multiple times, it can lead to a put "overflow", potentially causing memory corruption or a crash. This problem is a result of leftover code from a previous commit that modified the sd.fwnode but failed to remove the unnecessary fwnode handle put() calls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Improper Resource Release

Weakness Enumeration

CWE-787

CWE-404

Related Identifiers

BDU:2025-11809

CVE-2024-58003

OESA-2025-1446

OESA-2025-1450

USN-7521-1

USN-7521-2

USN-7521-3

USN-7651-1

USN-7651-2

USN-7651-3

USN-7651-4

USN-7651-5

USN-7651-6

USN-7652-1

USN-7653-1

USN-7737-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 505

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58003.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-53162 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21721 · Security Note
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21674 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58011 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7651-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7651-6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38240 · Security Note
• https://ubuntu.com/security/CVE-2025-21727 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22049 · Security Note
• https://ubuntu.com/security/CVE-2025-21744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21709 · Security Note
• https://ubuntu.com/security/CVE-2025-21815 · Vendor Advisory