CVE-2024-27039: clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
In the Linux kernel, the following vulnerability has been resolved:
clk: hisilicon: hi3559a: Fix an erroneous devmkfree()
'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration.
If a clkregister() call fails, 'pclk' may point to something different from what should be freed.
The best we can do, is to avoid this wrong release of memory.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27039?
CVE-2024-27039 has been classified with a specific severity level that indicates its potential impact on system security.
What are the affected versions for CVE-2024-27039?
CVE-2024-27039 affects specific versions of the Linux kernel, including versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, and 6.12.12-1.
How do I fix CVE-2024-27039?
To fix CVE-2024-27039, you should upgrade to a patched version of the Linux kernel that resolves the vulnerability.
What is the nature of the vulnerability in CVE-2024-27039?
CVE-2024-27039 pertains to an issue in the Linux kernel related to an erroneous devm_kfree() function in the clk: hisilicon: hi3559a module.
Is there a specific mitigation for CVE-2024-27039?
The recommended mitigation for CVE-2024-27039 is applying the necessary kernel updates or patches released by the vendors.