CVE-2024-55639

Published: Jan 11, 2025Modified: Aug 4, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitch_device structure is used at several driver locations. So passing this node to of_node_put() after the first use is wrong. Move of_node_put() for this node to exit paths.

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 6.3 to 6.6.67
Linux Linux Kernel	From 6.7 to 6.12.6
Linux Linux Kernel	Version 6.13 rc1
Linux Linux Kernel	Version 6.13 rc2

References (3)

https://git.kernel.org/stable/c/66b7e9f85b8459c823b11e9af69dbf4be5eb6be8

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/92007a28f95413058a7268dc84e5f44b700165d1

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/bf8c6755f02029d1eddc3ff19b870240f054afc7

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.