NetSight
IP …
high7.8

CVE-2024-57904

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocated iio_dev Current implementation of at9…

Impact

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocated iio_dev Current implementation of at91_ts_register() calls input_free_deivce() on st->ts_input, however, the err label can be reached before the allocated iio_dev is stored to st->ts_input. Thus call input_free_device() on input instead of st->ts_input.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16 before 5.4.290
from 5.5 before 5.10.234
from 5.11 before 5.15.177
from 5.16 before 6.1.125
from 6.2 before 6.6.72
from 6.7 before 6.12.10

References