In the Linux kernel, the following vulnerability has been resolved:
of: Fix double free in of_parse_phandle_with_args_map
In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop.
Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur".
Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-cross-headers | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perf-debuginfo | Dec 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.75-99.163Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kb | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub