Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A use-after-put vulnerability has been identified in the Linux kernel's handling of device tree nodes within the Renesas rswitch driver. The issue arises because the device tree node referenced in the rswitch_device structure is utilized in multiple locations throughout the driver. Incorrectly, the node is released with of_node_put() after its initial use, which can lead to a use-after-free condition. This vulnerability has been addressed by relocating the of_node_put() call to the appropriate exit paths, ensuring that the device tree node is properly managed without introducing a use-after-free risk.
Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for memory corruption or arbitrary code execution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.