In the Linux kernel, the following vulnerability has been resolved:
of: Fix double free in of_parse_phandle_with_args_map
In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop.
Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur".
Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-core | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel | Dec 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.75-99.163Upgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extra | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-source-vanilla | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04 | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub