Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-57887

drm: adv7511: Fix use-after-free in adv7533_attach_dsi()

Description

In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer was assigned and freed in adv7533_parse_dt(), and later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue by dropping of_node_put() in adv7533_parse_dt() and calling of_node_put() in error path of probe() and also in the remove().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1e4d58cd7f888522d16f221d628356befbb08468 to < acec80d9f126cd3fa764bbe3d96bc0cb5cd2b087affected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to < d208571943ffddc438a7ce533d5d0b9219806242affected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to < 1f49aaf55652580ae63ab83d67211fe6a55d83dcaffected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to < ca9d077350fa21897de8bf64cba23b198740aab5affected
  • 1e4d58cd7f888522d16f221d628356befbb08468 to < 81adbd3ff21c1182e06aa02c6be0bfd9ea02d8e8affected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 5.10.234 to ≤ 5.10.*unaffected
  • 6.1.125 to ≤ 6.1.*unaffected
  • 6.6.70 to ≤ 6.6.*unaffected
  • 6.12.9 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References