CVE-2024-58003: media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: ds90ub9x3: Fix extra fwnodehandleput()
The ub913 and ub953 drivers call fwnodehandleput(priv->sd.fwnode) as part of their remove process, and if the driver is removed multiple times, eventually leads to put "overflow", possibly causing memory corruption or crash.
The fwnodehandleput() is a leftover from commit 905f88ccebb1 ("media: i2c: ds90ub9x3: Fix sub-device matching"), which changed the code related to the sd.fwnode, but missed removing these fwnodehandleput() calls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58003?
CVE-2024-58003 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-58003?
To fix CVE-2024-58003, update your Linux kernel to a version that includes the patch for this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-58003?
CVE-2024-58003 affects Linux kernel versions from 6.7 up to 6.12.14 and versions from 6.6 up to 6.6.78.
What are the potential impacts of CVE-2024-58003?
If exploited, CVE-2024-58003 may lead to resource leaks or stability issues within the kernel.
Who is affected by CVE-2024-58003?
Users running vulnerable versions of the Linux kernel, particularly those using the ub913 and ub953 drivers, may be affected by CVE-2024-58003.