In the Linux kernel, the following vulnerability has been resolved:
net: renesas: rswitch: avoid use-after-put for a device tree node
The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnode_put() after the first use is wrong.
Move ofnodeput() for this node to exit paths.
[
{
"target": {
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"line_hashes": [
"251525555612701838553218716694604004706",
"297219298794462493039806409912643301810",
"60772510681586234262436775750865490017",
"305499902166065692780791663919236659830",
"335874787763659057829239325987643470977",
"224795817562725828209612428805787488197",
"156474028477895222989464534960593194707",
"233811177098858787681616440924338947601",
"209313385917814892641740405029447173626",
"110525329810372468018850652689278582271",
"32378306065088473572007246046907535925",
"261881330426264238805778503773692424002"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66b7e9f85b8459c823b11e9af69dbf4be5eb6be8",
"deprecated": false,
"id": "CVE-2024-55639-14be8108",
"signature_type": "Line"
},
{
"target": {
"function": "rswitch_device_free",
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"length": 218.0,
"function_hash": "256948681209050499242177357872384936876"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92007a28f95413058a7268dc84e5f44b700165d1",
"deprecated": false,
"id": "CVE-2024-55639-15e8f2e2",
"signature_type": "Function"
},
{
"target": {
"function": "rswitch_device_alloc",
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"length": 1519.0,
"function_hash": "335721327836220142289237970494239129091"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92007a28f95413058a7268dc84e5f44b700165d1",
"deprecated": false,
"id": "CVE-2024-55639-189553e4",
"signature_type": "Function"
},
{
"target": {
"function": "rswitch_device_free",
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"length": 218.0,
"function_hash": "256948681209050499242177357872384936876"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf8c6755f02029d1eddc3ff19b870240f054afc7",
"deprecated": false,
"id": "CVE-2024-55639-1bcf3b7e",
"signature_type": "Function"
},
{
"target": {
"function": "rswitch_device_free",
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"length": 218.0,
"function_hash": "256948681209050499242177357872384936876"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66b7e9f85b8459c823b11e9af69dbf4be5eb6be8",
"deprecated": false,
"id": "CVE-2024-55639-259dacee",
"signature_type": "Function"
},
{
"target": {
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"line_hashes": [
"251525555612701838553218716694604004706",
"297219298794462493039806409912643301810",
"60772510681586234262436775750865490017",
"305499902166065692780791663919236659830",
"335874787763659057829239325987643470977",
"224795817562725828209612428805787488197",
"156474028477895222989464534960593194707",
"233811177098858787681616440924338947601",
"209313385917814892641740405029447173626",
"110525329810372468018850652689278582271",
"32378306065088473572007246046907535925",
"261881330426264238805778503773692424002"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92007a28f95413058a7268dc84e5f44b700165d1",
"deprecated": false,
"id": "CVE-2024-55639-413e7a72",
"signature_type": "Line"
},
{
"target": {
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"line_hashes": [
"251525555612701838553218716694604004706",
"297219298794462493039806409912643301810",
"60772510681586234262436775750865490017",
"305499902166065692780791663919236659830",
"335874787763659057829239325987643470977",
"224795817562725828209612428805787488197",
"156474028477895222989464534960593194707",
"233811177098858787681616440924338947601",
"209313385917814892641740405029447173626",
"110525329810372468018850652689278582271",
"32378306065088473572007246046907535925",
"261881330426264238805778503773692424002"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf8c6755f02029d1eddc3ff19b870240f054afc7",
"deprecated": false,
"id": "CVE-2024-55639-916444e3",
"signature_type": "Line"
},
{
"target": {
"function": "rswitch_device_alloc",
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"length": 1519.0,
"function_hash": "335721327836220142289237970494239129091"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66b7e9f85b8459c823b11e9af69dbf4be5eb6be8",
"deprecated": false,
"id": "CVE-2024-55639-cdbf334a",
"signature_type": "Function"
},
{
"target": {
"function": "rswitch_device_alloc",
"file": "drivers/net/ethernet/renesas/rswitch.c"
},
"digest": {
"length": 1453.0,
"function_hash": "274334459075913091539586822350705597810"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf8c6755f02029d1eddc3ff19b870240f054afc7",
"deprecated": false,
"id": "CVE-2024-55639-ecbd5b99",
"signature_type": "Function"
}
]