CVE-2024-58034

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-58034
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-58034.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-58034
Downstream
Related
Published
2025-02-27T20:00:52.226Z
Modified
2026-03-20T12:39:57.994214Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
Details

In the Linux kernel, the following vulnerability has been resolved:

memory: tegra20-emc: fix an OF node reference bug in tegraemcfindnodebyramcode()

As offindnodebyname() release the reference of the argument device node, tegraemcfindnodebyramcode() releases some device nodes while still in use, resulting in possible UAFs. According to the bindings and the in-tree DTS files, the "emc-tables" node is always device's child node with the property "nvidia,use-ram-code", and the "lpddr2" node is a child of the "emc-tables" node. Thus utilize the foreachchildofnode() macro and ofgetchildbyname() instead of offindnodebyname() to simplify the code.

This bug was found by an experimental verification tool that I am developing.

[krzysztof: applied v1, adjust the commit msg to incorporate v2 parts]

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58034.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
96e5da7c842424bcf64afe1082b960b42b96190b
Fixed
c3def10c610ae046aaa61d00528e7bd15e4ad8d3
Fixed
e9d07e91de140679eeaf275f47ad154467cb9e05
Fixed
c144423cb07e4e227a8572d5742ca2b36ada770d
Fixed
3b02273446e23961d910b50cc12528faec649fb2
Fixed
755e44538c190c31de9090d8e8821d228fcfd416
Fixed
b9784e5cde1f9fb83661a70e580e381ae1264d12

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-58034.json"