In the Linux kernel, the following vulnerability has been resolved:
sh: intc: Fix use-after-free bug in registerintccontroller()
In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let's only add it to the list after everything has succeeded.
[
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@971b4893457788e0e123ea552f0bb126a5300e61",
"digest": {
"line_hashes": [
"160060015712029645757236741655189743885",
"334996346517534733577695234889073730911",
"330316959539740927076805691406230164429",
"32080579174720913486157981614569623926",
"210037444425288554101204775208253507541",
"98366776424993681676734101853257754244",
"172087096329592964166131212755626129450"
],
"threshold": 0.9
},
"id": "CVE-2024-53165-487e7c81"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c3f4f4547fb291982f5ef56c048277c4d5ccc4e4",
"digest": {
"line_hashes": [
"160060015712029645757236741655189743885",
"334996346517534733577695234889073730911",
"330316959539740927076805691406230164429",
"32080579174720913486157981614569623926",
"210037444425288554101204775208253507541",
"98366776424993681676734101853257754244",
"172087096329592964166131212755626129450"
],
"threshold": 0.9
},
"id": "CVE-2024-53165-51794006"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c",
"function": "register_intc_controller"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c43df7dae28fb9fce96ef088250c1e3c3a77c527",
"digest": {
"length": 5002.0,
"function_hash": "293701624570503603381803269111798182402"
},
"id": "CVE-2024-53165-7194beb9"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c",
"function": "register_intc_controller"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc",
"digest": {
"length": 5522.0,
"function_hash": "196398122015588034438729564473846601847"
},
"id": "CVE-2024-53165-79122881"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c43df7dae28fb9fce96ef088250c1e3c3a77c527",
"digest": {
"line_hashes": [
"160060015712029645757236741655189743885",
"334996346517534733577695234889073730911",
"330316959539740927076805691406230164429",
"32080579174720913486157981614569623926",
"210037444425288554101204775208253507541",
"98366776424993681676734101853257754244",
"172087096329592964166131212755626129450"
],
"threshold": 0.9
},
"id": "CVE-2024-53165-94c3cdb2"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c",
"function": "register_intc_controller"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63e72e551942642c48456a4134975136cdcb9b3c",
"digest": {
"length": 5002.0,
"function_hash": "293701624570503603381803269111798182402"
},
"id": "CVE-2024-53165-94ecf9d9"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ba6e19912570b2ad68298be0be1dc779014a303",
"digest": {
"line_hashes": [
"160060015712029645757236741655189743885",
"334996346517534733577695234889073730911",
"330316959539740927076805691406230164429",
"32080579174720913486157981614569623926",
"210037444425288554101204775208253507541",
"98366776424993681676734101853257754244",
"172087096329592964166131212755626129450"
],
"threshold": 0.9
},
"id": "CVE-2024-53165-a7df15ce"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8de818df12d86a1a26a8efd7b4b3b9c6dc3c5cc",
"digest": {
"line_hashes": [
"160060015712029645757236741655189743885",
"334996346517534733577695234889073730911",
"330316959539740927076805691406230164429",
"32080579174720913486157981614569623926",
"210037444425288554101204775208253507541",
"98366776424993681676734101853257754244",
"172087096329592964166131212755626129450"
],
"threshold": 0.9
},
"id": "CVE-2024-53165-ae319a92"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63e72e551942642c48456a4134975136cdcb9b3c",
"digest": {
"line_hashes": [
"160060015712029645757236741655189743885",
"334996346517534733577695234889073730911",
"330316959539740927076805691406230164429",
"32080579174720913486157981614569623926",
"210037444425288554101204775208253507541",
"98366776424993681676734101853257754244",
"172087096329592964166131212755626129450"
],
"threshold": 0.9
},
"id": "CVE-2024-53165-b4f01e2d"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c",
"function": "register_intc_controller"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@588bdec1ff8b81517dbae0ae51c9df52c0b952d3",
"digest": {
"length": 5002.0,
"function_hash": "293701624570503603381803269111798182402"
},
"id": "CVE-2024-53165-c3f44a37"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c",
"function": "register_intc_controller"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ba6e19912570b2ad68298be0be1dc779014a303",
"digest": {
"length": 5002.0,
"function_hash": "293701624570503603381803269111798182402"
},
"id": "CVE-2024-53165-c7ea8284"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@588bdec1ff8b81517dbae0ae51c9df52c0b952d3",
"digest": {
"line_hashes": [
"160060015712029645757236741655189743885",
"334996346517534733577695234889073730911",
"330316959539740927076805691406230164429",
"32080579174720913486157981614569623926",
"210037444425288554101204775208253507541",
"98366776424993681676734101853257754244",
"172087096329592964166131212755626129450"
],
"threshold": 0.9
},
"id": "CVE-2024-53165-d8fb6cec"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c",
"function": "register_intc_controller"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@971b4893457788e0e123ea552f0bb126a5300e61",
"digest": {
"length": 5522.0,
"function_hash": "196398122015588034438729564473846601847"
},
"id": "CVE-2024-53165-dc1bc16d"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/sh/intc/core.c",
"function": "register_intc_controller"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c3f4f4547fb291982f5ef56c048277c4d5ccc4e4",
"digest": {
"length": 5002.0,
"function_hash": "293701624570503603381803269111798182402"
},
"id": "CVE-2024-53165-e812cf93"
}
]