Use-After-Free Vulnerability in Linux Kernel Affects Adv7533 Display Interface

CVE-2024-57887

Summary

A serious use-after-free vulnerability exists within the Linux kernel related to the Adv7533 display interface. The issue arises when the host_node pointer is assigned and subsequently freed during the processing of device tree information in the adv7533_parse_dt() function. Later, this pointer is incorrectly utilized in the adv7533_attach_dsi() function, which can lead to potential exploitation risks. To rectify this vulnerability, the code was amended to remove the premature release of the node in adv7533_parse_dt() and ensure appropriate handling of node references during the error paths in probe() and during removal operations.

References