CVE-2023-52679

In the Linux kernel, the following vulnerability has been resolved:

of: Fix double free in of_parse_phandle_with_args_map

The Linux kernel CVE team has assigned CVE-2023-52679 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051750-CVE-2023-52679-948f@gregkh/T

This vulnerability is rated as having a Low severity for Red Hat products because device tree data is typically provided by trusted system firmware during boot or loaded by privileged administrative processes. An unprivileged local attacker cannot supply arbitrary device tree nodes or map configurations under standard operating conditions. Consequently, triggering the incorrect reference release in the device tree parsing logic is practically constrained to non-standard hardware configurations or privileged administrative operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.