CVE-2024-27027

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27027
In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpll_xa_ref_*_del() for multiple registrations Currently, if there are multiple registrations of the same pin on the same dpll device, following warnings are observed: WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:143 dpll_xa_ref_pin_del.isra.0+0x21e/0x230 WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:223 __dpll_pin_unregister+0x2b3/0x2c0 The problem is, that in both dpll_xa_ref_dpll_del() and dpll_xa_ref_pin_del() registration is only removed from list in case the reference count drops to zero. That is wrong, the registration has to be removed always. To fix this, remove the registration from the list and free it unconditionally, instead of doing it only when the ref reference counter reaches zero.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661 Patch
https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67 Patch
https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172 Patch
https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661 Patch
https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67 Patch
https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Sep 2025, 14:43

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661 - () https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661 - Patch
References () https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67 - () https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67 - Patch
References () https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172 - () https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dpll: corrige dpll_xa_ref_*_del() para múltiples registros Actualmente, si hay múltiples registros del mismo pin en el mismo dispositivo dpll, se observan las siguientes advertencias: ADVERTENCIA: CPU: 5 PID: 2212 en drivers/dpll/dpll_core.c:143 dpll_xa_ref_pin_del.isra.0+0x21e/0x230 ADVERTENCIA: CPU: 5 PID: 2212 en drivers/dpll/dpll_core.c:223 __dpll_pin_unregister+0x2b3/0x2c0 El problema es que Tanto en dpll_xa_ref_dpll_del() como en dpll_xa_ref_pin_del() el registro solo se elimina de la lista en caso de que el recuento de referencias caiga a cero. Eso está mal, siempre hay que eliminar el registro. Para solucionar este problema, elimine el registro de la lista y libérelo incondicionalmente, en lugar de hacerlo sólo cuando el contador de referencia de referencia llegue a cero.
References () https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661 - () https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661 -
References () https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67 - () https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67 -
References () https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172 - () https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172 -

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2025-09-18 14:43

NVD link : CVE-2024-27027

Mitre link : CVE-2024-27027

CVE.ORG link : CVE-2024-27027

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo