CVE-2024-57904: iio: adc: at91: call input_free_device() on allocated iio_dev
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: at91: call inputfreedevice() on allocated iiodev
Current implementation of at91tsregister() calls inputfreedeivce() on st->tsinput, however, the err label can be reached before the allocated iiodev is stored to st->tsinput. Thus call inputfreedevice() on input instead of st->tsinput.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57904?
CVE-2024-57904 has been categorized as a moderate severity vulnerability due to potential memory management issues in the Linux kernel.
How do I fix CVE-2024-57904?
To resolve CVE-2024-57904, update your Linux kernel to the latest version that includes the fix for this vulnerability.
Which systems are affected by CVE-2024-57904?
CVE-2024-57904 affects systems running vulnerable versions of the Linux kernel, specifically those utilizing the at91 touchscreen driver.
What are the risks associated with CVE-2024-57904?
The risks include potential denial of service scenarios due to improper input device management, which can affect system stability.
When was CVE-2024-57904 disclosed?
CVE-2024-57904 was disclosed in 2024 as part of a series of vulnerability patches for the Linux kernel.