CVE-2024-58003

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified, specifically in the media: i2c: ds90ub9x3 module. The ub913 and ub953 drivers call fwnode handle put(priv->sd.fwnode) as part of their remove process. If the driver is removed multiple times, it can lead to a put "overflow", potentially causing memory corruption or a crash. This problem is a result of leftover code from a previous commit that modified the sd.fwnode but failed to remove the unnecessary fwnode handle put() calls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.