CVE-2024-55639 net: renesas: rswitch: avoid use-after-put for a device tree node

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

CVE-2024-55639

In CVE-2024-55639, the Linux kernel rswitch driver (Renesas) flaw stems from improper use of a saved device-tree node in rswitch_device, where of_node_put() was called after the first reference is used. The node may be released too late/too early across multiple code paths, risking use-after-free...

CVE-2024-55639 net: renesas: rswitch: avoid use-after-put for a device tree node

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

CVE-2024-55639: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

PT-2025-3134

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, related to the use of a device tree node in the rswitch device structure. The issue arises from passing the node to of node put after its...

tty: serial: ma35d1: Add a NULL check for of_node

...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the fact that the tty:serial:ma35d1 module may be null for pdev-dev.ofnode when the serial node is missing...

SUSE CVE-2024-40991

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix ofk3udmaglueparsechnbyid The ofk3udmaglueparsechnbyid helper function erroneously invokes "ofnodeput" on the "udmaxnp" device-node passed to it, without having incremented its reference count at a...

CVE-2021-47609

CVE-2021-47609 : Linux kernel vulnerability in the SCPI genpd driver for arm SCPI firmware. The issue was a missing bound check on scpi_pd->name, which could overflow a 30-byte buffer when copying the device name, potentially leading to memory corruption. The fix allocates the string dynamical...

PT-2025-49678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the zynq early slcr init function within the ARM Zynq component of the Linux kernel. The of find compatible node function increments the reference count ...