CVE-2024-57887

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description A use-after-free issue was found in the Linux kernel, specifically in the adv7533 attach dsi() function. The host node pointer was assigned and freed in adv7533 parse dt(), and later used in adv7533 attach dsi(). This issue was resolved by removing of node put() in adv7533 parse dt() and calling of node put() in the error path of probe() and also in remove().

Recommendations For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the adv7533 attach dsi() function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the host node pointer in the affected code path until the issue is resolved.