CVE-2024-56562

i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()

Description

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() if (dev->boardinfo && dev->boardinfo->init_dyn_addr) ^^^ here check "init_dyn_addr" i3c_bus_set_addr_slot_status(&master->bus, dev->info.dyn_addr, ...) ^^^^ free "dyn_addr" Fix copy/paste error "dyn_addr" by replacing it with "init_dyn_addr".

N/A

CVSS

Severity:

EPSS 0.07%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/c2f0ce241154b04f2fc150ff16ad82d9b8fdfa4a
https://git.kernel.org/stable/c/093ecc6d82ff1d2e0cbf6f2000438b6c698145cb
https://git.kernel.org/stable/c/0cb21f1ea3a2e19ee314a8fcf95461b5c453c59e
https://git.kernel.org/stable/c/991e33a99fd3b5d432f0629565f532f563fe019a
https://git.kernel.org/stable/c/ce30d11b39e8d637fed4704a5b43e9d556990475
https://git.kernel.org/stable/c/0e8ab955c6d06f9d907761c07c02d1492f0a8ac1
https://git.kernel.org/stable/c/3082990592f7c6d7510a9133afa46e31bbe26533

Frequently Asked Questions

What is the severity of CVE-2024-56562?: CVE-2024-56562 has not yet been assigned a CVSS score.
How to fix CVE-2024-56562?: To fix CVE-2024-56562, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-56562 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-56562 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-56562?: CVE-2024-56562 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.