CVE-2024-27027

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> dpll: fix dpll_xa_ref_*_del() for multiple registrations<br /> <br /> Currently, if there are multiple registrations of the same pin on the<br /> same dpll device, following warnings are observed:<br /> WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:143 dpll_xa_ref_pin_del.isra.0+0x21e/0x230<br /> WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:223 __dpll_pin_unregister+0x2b3/0x2c0<br /> <br /> The problem is, that in both dpll_xa_ref_dpll_del() and<br /> dpll_xa_ref_pin_del() registration is only removed from list in case the<br /> reference count drops to zero. That is wrong, the registration has to<br /> be removed always.<br /> <br /> To fix this, remove the registration from the list and free<br /> it unconditionally, instead of doing it only when the ref reference<br /> counter reaches zero.