CVE-2024-27027

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-27027
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-27027.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-27027
Downstream
Related
Published
2024-05-01T12:49:35Z
Modified
2025-10-17T02:32:06.533844Z
Summary
dpll: fix dpll_xa_ref_*_del() for multiple registrations
Details

In the Linux kernel, the following vulnerability has been resolved:

dpll: fix dpllxaref*del() for multiple registrations

Currently, if there are multiple registrations of the same pin on the same dpll device, following warnings are observed: WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpllcore.c:143 dpllxarefpindel.isra.0+0x21e/0x230 WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpllcore.c:223 _dpllpin_unregister+0x2b3/0x2c0

The problem is, that in both dpllxarefdplldel() and dpllxarefpindel() registration is only removed from list in case the reference count drops to zero. That is wrong, the registration has to be removed always.

To fix this, remove the registration from the list and free it unconditionally, instead of doing it only when the ref reference counter reaches zero.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9431063ad323ac864750aeba4d304389bc42ca4e
Fixed
769324eb35143462542cdb15483cdaf4877bf661
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9431063ad323ac864750aeba4d304389bc42ca4e
Fixed
b27e32e9367dac024cd6f61f22655714f483fd67
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9431063ad323ac864750aeba4d304389bc42ca4e
Fixed
b446631f355ece73b13c311dd712c47381a23172

Affected versions

v6.*

v6.6
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.11
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.2