In the Linux kernel, the following vulnerability has been resolved:
of: Fix double free in of_parse_phandle_with_args_map
In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop.
Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur".
Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-core | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Dec 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade python3-perf-debuginfo | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-cross-headers | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade kernel-sourceUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-awsUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-22.04 | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub