CVE-2024-57887

216.73.217.86

· Published 15/01/2025 13:15 · Modified 11/02/2025 16:15

Labels: CVE-2024-57887 2025-01-15 416baaa9-dc9f-4396-8d5f-8c081fb06d67 CVE-2024-57887 CWE-416

Essential information

Published: 15/01/2025 13:15
Modified: 11/02/2025 16:15
Author: —
Creator: —
CVSS: 7.8 HIGH (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS metrics

Description

In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer was assigned and freed in adv7533_parse_dt(), and later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue by dropping of_node_put() in adv7533_parse_dt() and calling of_node_put() in error path of probe() and also in the remove().

NVD status

Status: Modified — CVE has been recently published to the CVE List and has been received by the NVD.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD: View on NVD

Affected products (CPE)

Product	CPE
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel:6.13:rc1::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel:6.13:rc2::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel:6.13:rc3::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel:6.13:rc4::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel:6.13:rc5::::::`