CVE-2024-55639

The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnode_put() after the first use is wrong.

Move ofnodeput() for this node to exit paths.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55639.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

b46f1e5793298c67efc2f1b917350a2cefacf9d6

Fixed

bf8c6755f02029d1eddc3ff19b870240f054afc7

Fixed

92007a28f95413058a7268dc84e5f44b700165d1

Fixed

66b7e9f85b8459c823b11e9af69dbf4be5eb6be8

Affected versions

v6.*

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.2

v6.12.3

v6.12.4

v6.12.5

v6.13-rc1

v6.2

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-55639.json"

vanir_signatures

[
    {
        "signature_version": "v1",
        "target": {
            "file": "drivers/net/ethernet/renesas/rswitch.c",
            "function": "rswitch_device_free"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf8c6755f02029d1eddc3ff19b870240f054afc7",
        "deprecated": false,
        "digest": {
            "function_hash": "256948681209050499242177357872384936876",
            "length": 218.0
        },
        "id": "CVE-2024-55639-1bcf3b7e",
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "drivers/net/ethernet/renesas/rswitch.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf8c6755f02029d1eddc3ff19b870240f054afc7",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251525555612701838553218716694604004706",
                "297219298794462493039806409912643301810",
                "60772510681586234262436775750865490017",
                "305499902166065692780791663919236659830",
                "335874787763659057829239325987643470977",
                "224795817562725828209612428805787488197",
                "156474028477895222989464534960593194707",
                "233811177098858787681616440924338947601",
                "209313385917814892641740405029447173626",
                "110525329810372468018850652689278582271",
                "32378306065088473572007246046907535925",
                "261881330426264238805778503773692424002"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-55639-916444e3",
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "drivers/net/ethernet/renesas/rswitch.c",
            "function": "rswitch_device_alloc"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf8c6755f02029d1eddc3ff19b870240f054afc7",
        "deprecated": false,
        "digest": {
            "function_hash": "274334459075913091539586822350705597810",
            "length": 1453.0
        },
        "id": "CVE-2024-55639-ecbd5b99",
        "signature_type": "Function"
    }
]