CVE-2024-55639
kernel: net: renesas: rswitch: avoid use-after-put for a device tree node
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · January 11, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
net: renesas: rswitch: avoid use-after-put for a device tree node
The device tree node saved in the rswitch_device structure is used at several driver locations. So passing this node to of_node_put() after the first use is wrong.
Move of_node_put() for this node to exit paths.
Statement
This vulnerability presents negligible risk to Red Hat environments as the Renesas Ethernet switch driver was introduced in upstream kernel releases newer than the kernels maintained in supported Red Hat Enterprise Linux versions. Additionally, exploitation necessitates specialized Renesas automotive SoC hardware that is not targeted or deployed by standard enterprise platforms. As a result, supported Red Hat products are not affected by this flaw.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified