CVE-2024-50012

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: A vulnerability in the Linux kernel's cpufreq function has been resolved. The issue occurred in the parse perf domain function, where a bad reference count on the CPU node could happen if the call to of parse phandle with args returned an error. This would cause the reference to the CPU device node to not be properly decremented. The problem was addressed by declaring the variable with the free(device node) cleanup attribute.

Recommendations: For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider applying the patch that declares the variable with the free(device node) cleanup attribute to prevent incorrect reference counts on CPU nodes.