In the Linux kernel, the following vulnerability has been resolved:
of: Fix double free in of_parse_phandle_with_args_map
In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop.
Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur".
Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.148-97.158Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-debuginfo | Dec 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extra | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-rt-develUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-default-livepatch-devel | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1018-raspi | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub