Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-58003

media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ds90ub9x3: Fix extra fwnode_handle_put() The ub913 and ub953 drivers call fwnode_handle_put(priv->sd.fwnode) as part of their remove process, and if the driver is removed multiple times, eventually leads to put "overflow", possibly causing memory corruption or crash. The fwnode_handle_put() is a leftover from commit 905f88ccebb1 ("media: i2c: ds90ub9x3: Fix sub-device matching"), which changed the code related to the sd.fwnode, but missed removing these fwnode_handle_put() calls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to < 474d7baf91d37bc411fa60de5bbf03c9dd82e18aaffected
  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to < f4e4373322f8d4c19721831f7fb989e52d30dab0affected
  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to < 70743d6a8b256225675711e7983825f1be86062daffected
  • 905f88ccebb14e42bcd19455b0d9c0d4808f1897 to < 60b45ece41c5632a3a3274115a401cb244180646affected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 6.6.78 to ≤ 6.6.*unaffected
  • 6.12.14 to ≤ 6.12.*unaffected
  • 6.13.3 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References