cbcvebase.
CVE-2024-55639
published 2025-01-11

CVE-2024-55639: In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.2th percentile
In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitch_device structure is used at several driver locations. So passing this node to of_node_put() after the first use is wrong. Move of_node_put() for this node to exit paths.

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.12.6-1 (forky)linux 6.12.6-1 (forky)
linuxlinux
linuxlinux>= b46f1e5793298c67efc2f1b917350a2cefacf9d6 < bf8c6755f02029d1eddc3ff19b870240f054afc7bf8c6755f02029d1eddc3ff19b870240f054afc7
linuxlinux>= b46f1e5793298c67efc2f1b917350a2cefacf9d6 < 92007a28f95413058a7268dc84e5f44b700165d192007a28f95413058a7268dc84e5f44b700165d1
linuxlinux>= b46f1e5793298c67efc2f1b917350a2cefacf9d6 < 66b7e9f85b8459c823b11e9af69dbf4be5eb6be866b7e9f85b8459c823b11e9af69dbf4be5eb6be8
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.12.6-16.12.6-1
linuxlinux_kernel>= 0 < 6.12.6-16.12.6-1
linuxlinux_kernel>= 0 < 6.8.0-60.636.8.0-60.63
linuxlinux_kernel>= 6.3 < 6.6.676.6.67
linuxlinux_kernel>= 6.7 < 6.12.66.12.6

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.