Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitch_device structure is used at several driver locations. So passing this node to of_node_put() after the first use is wrong. Move of_node_put() for this node to exit paths.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.3, < 6.6.67 |
References
- https://git.kernel.org/stable/c/66b7e9f85b8459c823b11e9af69dbf4be5eb6be8Patch
- https://git.kernel.org/stable/c/92007a28f95413058a7268dc84e5f44b700165d1Patch
- https://git.kernel.org/stable/c/bf8c6755f02029d1eddc3ff19b870240f054afc7Patch
FAQ
What is CVE-2024-55639?
CVE-2024-55639 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitch_device structure is us...
How severe is CVE-2024-55639?
CVE-2024-55639 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-55639?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.