CVE-2024-58034

Severity CVSS v4.0:
Pending analysis
Type:
CWE-416 Use After Free
Publication date:
27/02/2025
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()<br /> <br /> As of_find_node_by_name() release the reference of the argument device<br /> node, tegra_emc_find_node_by_ram_code() releases some device nodes while<br /> still in use, resulting in possible UAFs. According to the bindings and<br /> the in-tree DTS files, the "emc-tables" node is always device&amp;#39;s child<br /> node with the property "nvidia,use-ram-code", and the "lpddr2" node is a<br /> child of the "emc-tables" node. Thus utilize the<br /> for_each_child_of_node() macro and of_get_child_by_name() instead of<br /> of_find_node_by_name() to simplify the code.<br /> <br /> This bug was found by an experimental verification tool that I am<br /> developing.<br /> <br /> [krzysztof: applied v1, adjust the commit msg to incorporate v2 parts]

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.0 (including) 5.15.179 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.129 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.76 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.13 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.13.2 (excluding)