https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:17:01 +0000 https://vulnerability.circl.lu/vuln/cve-2024-58034 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()</p> <p>As of_find_node_by_name() release the reference of the argument device node, tegra_emc_find_node_by_ram_code() releases some device nodes while still in use, resulting in possible UAFs. According to the bindings and the in-tree DTS files, the &#34;emc-tables&#34; node is always device&#39;s child node with the property &#34;nvidia,use-ram-code&#34;, and the &#34;lpddr2&#34; node is a child of the &#34;emc-tables&#34; node. Thus utilize the for_each_child_of_node() macro and of_get_child_by_name() instead of of_find_node_by_name() to simplify the code.</p> <p>This bug was found by an experimental verification tool that I am developing.</p> <p>[krzysztof: applied v1, adjust the commit msg to incorporate v2 parts]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()</p> <p>As of_find_node_by_name() release the reference of the argument device node, tegra_emc_find_node_by_ram_code() releases some device nodes while still in use, resulting in possible UAFs. According to the bindings and the in-tree DTS files, the &#34;emc-tables&#34; node is always device&#39;s child node with the property &#34;nvidia,use-ram-code&#34;, and the &#34;lpddr2&#34; node is a child of the &#34;emc-tables&#34; node. Thus utilize the for_each_child_of_node() macro and of_get_child_by_name() instead of of_find_node_by_name() to simplify the code.</p> <p>This bug was found by an experimental verification tool that I am developing.</p> <p>[krzysztof: applied v1, adjust the commit msg to incorporate v2 parts]</p> https://vulnerability.circl.lu/vuln/cve-2024-58034