CVE-2024-27027

dpll: fix dpll_xa_ref_*_del() for multiple registrations

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dpll: fix dpll_xa_ref_*_del() for multiple registrations

Currently, if there are multiple registrations of the same pin on the

same dpll device, following warnings are observed:

WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:143 dpll_xa_ref_pin_del.isra.0+0x21e/0x230

WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:223 __dpll_pin_unregister+0x2b3/0x2c0

The problem is, that in both dpll_xa_ref_dpll_del() and

dpll_xa_ref_pin_del() registration is only removed from list in case the

reference count drops to zero. That is wrong, the registration has to

be removed always.

To fix this, remove the registration from the list and free

it unconditionally, instead of doing it only when the ref reference

counter reaches zero.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.3th percentile
Published
2024-05-01T12:49Z
EPSS history
Timeline
  • 01 MAY 12:49Z
    dpll: fix dpll_xa_ref_*_del() for multiple registrations
    cvelistv5