CVE-2024-58003
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
27/02/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()<br />
<br />
The ub913 and ub953 drivers call fwnode_handle_put(priv->sd.fwnode) as<br />
part of their remove process, and if the driver is removed multiple<br />
times, eventually leads to put "overflow", possibly causing memory<br />
corruption or crash.<br />
<br />
The fwnode_handle_put() is a leftover from commit 905f88ccebb1 ("media:<br />
i2c: ds90ub9x3: Fix sub-device matching"), which changed the code<br />
related to the sd.fwnode, but missed removing these fwnode_handle_put()<br />
calls.