CVE-2024-40991

Published: Jul 12, 2024Modified: Aug 4, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() The of_k3_udma_glue_parse_chn_by_id() helper function erroneously invokes "of_node_put()" on the "udmax_np" device-node passed to it, without having incremented its reference count at any point. Fix it.

Affected (5)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 6.9 to 6.9.7
Linux Linux Kernel	Version 6.10 rc1
Linux Linux Kernel	Version 6.10 rc2
Linux Linux Kernel	Version 6.10 rc3
Linux Linux Kernel	Version 6.10 rc4

References (4)

https://git.kernel.org/stable/c/a5ab5f413d1e4c7ed5f64271b025f0726374509e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/ba27e9d2207784da748b19170a2e56bd7770bd81

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a5ab5f413d1e4c7ed5f64271b025f0726374509e

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/ba27e9d2207784da748b19170a2e56bd7770bd81

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.