First published: Sun Jan 19 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocated iio_dev Current implementation of at91_ts_register() calls input_free_deivce() on st->ts_input, however, the err label can be reached before the allocated iio_dev is stored to st->ts_input. Thus call input_free_device() on input instead of st->ts_input.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Kernel-devel | ||
debian/linux | <=5.10.223-1 | 5.10.234-1 6.1.129-1 6.1.128-1 6.12.20-1 6.12.21-1 |
debian/linux-6.1 | 6.1.129-1~deb11u1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-57904 has been categorized as a moderate severity vulnerability due to potential memory management issues in the Linux kernel.
To resolve CVE-2024-57904, update your Linux kernel to the latest version that includes the fix for this vulnerability.
CVE-2024-57904 affects systems running vulnerable versions of the Linux kernel, specifically those utilizing the at91 touchscreen driver.
The risks include potential denial of service scenarios due to improper input device management, which can affect system stability.
CVE-2024-57904 was disclosed in 2024 as part of a series of vulnerability patches for the Linux kernel.