In the Linux kernel, the following vulnerability has been resolved:
of: Fix double free in of_parse_phandle_with_args_map
In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop.
Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur".
Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade bpftool | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.209-198.812Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-tools-debuginfo | Dec 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.75-99.163Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfo | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azure | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-laptop-23.10Upgrade linux-image-oem-22.04dUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-oem | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub