In the Linux kernel, the following vulnerability has been resolved:
of: Fix double free in of_parse_phandle_with_args_map
In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop.
Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur".
Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-zfcpdump-core | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.209-198.812Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Dec 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-docsUpgrade dtb-amdUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-devel | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-raspiUpgrade linux-image-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-nolpae | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub