CVE Database›CVE-2024-55639

CVE-2024-55639

kernel: net: renesas: rswitch: avoid use-after-put for a device tree node

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · January 11, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: renesas: rswitch: avoid use-after-put for a device tree node

The device tree node saved in the rswitch_device structure is used at several driver locations. So passing this node to of_node_put() after the first use is wrong.

Move of_node_put() for this node to exit paths.

Statement

This vulnerability presents negligible risk to Red Hat environments as the Renesas Ethernet switch driver was introduced in upstream kernel releases newer than the kernels maintained in supported Red Hat Enterprise Linux versions. Additionally, exploitation necessitates specialized Renesas automotive SoC hardware that is not targeted or deployed by standard enterprise platforms. As a result, supported Red Hat products are not affected by this flaw.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified