In the Linux kernel, the following vulnerability has been resolved:
of: Fix double free in of_parse_phandle_with_args_map
In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop.
Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur".
Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-core | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headers | Dec 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.75-99.163Upgrade perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-tools-debuginfo | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-default-devel | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-oem | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub