CVE-2024-36959
pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
MEDIUM
5.5
CVSS Score
Published: May 30, 2024 at 03:35 PM UTC
Updated: October 15, 2026 at 01:18 AM UTC
7 products affected across 2 vendorsLinux KernelSIMATIC S7-1500 TM MFPRUGGEDCOM RST2428P Firmware
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate propname buffer, we need to drop the reference count we just took. Because the pinctrl_dt_free_maps() includes the droping operation, here we call it directly.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.14.300 ≤ v < 4.154.19.267 ≤ v < 4.19.3144.9.334 ≤ v < 4.105.10.156 ≤ v < 5.10.2175.15.80 ≤ v < 5.15.1595.4.225 ≤ v < 5.4.2766.0.10 ≤ v < 6.1.916.2 ≤ v < 6.6.316.7 ≤ v < 6.8.104.14.3004.19.2674.9.33440f726fecd88121f3b95e70369785ad452dddf95.10.1565.15.805.4.2255834a3a98cd266ad35a229923c0adbd0addc8d686.0.106.96.9 rc16.9 rc26.9 rc36.9 rc46.9 rc56.9 rc6777430aa4ddccaa5accec6db90ffc1d47f00d47191d5c5060ee24fe8da88cd585bb43b843d2f0dce97e5b508e96176f1a73888ed89df396d7041bfcba988dcd3dd9e691c5ccc3324b209688f3b5453e9aaf552c5d53abe4659176e099575fe870d2e4768b4d9f55cd38435358bc16d580612bc0d798d7b4c
Vendor states this is fixed in 026e24cf31733dbd97f41cc9bc5273ace428eeec (fixed)
Vendor states this is fixed in 06780473cb8a858d1d6cab2673e021b072a852d1 (fixed)
Vendor states this is fixed in 35ab679e8bb5a81a4f922d3efbd43e32bce69274 (fixed)
Vendor states this is fixed in 47d253c485491caaf70d8cd8c0248ae26e42581f (fixed)
Vendor states this is fixed in 518d5ddafeb084d6d9b1773ed85164300037d0e6 (fixed)
Vendor states this is fixed in 76aa2440deb9a35507590f2c981a69a57ecd305d (fixed)
Vendor states this is fixed in a0cedbcc8852d6c77b00634b81e41f17f29d9404 (fixed)
Vendor states this is fixed in c7e02ccc9fdc496fe51e440e3e66ac36509ca049 (fixed)
Affected range stops below 4.10, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.15, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 4.19.314 (unaffected)
Vendor states this is fixed in 5.10.217 (unaffected)
Vendor states this is fixed in 5.15.159 (unaffected)
Vendor states this is fixed in 5.4.276 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)
Vendor states this is fixed in 6.1.91 (unaffected)
Vendor states this is fixed in 6.6.31 (unaffected)
Vendor states this is fixed in 6.8.10 (unaffected)
Vendor states this is fixed in 6.9 (unaffected)
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/026e24cf31733dbd97f41cc9bc5273ace428eeec
- https://git.kernel.org/stable/c/06780473cb8a858d1d6cab2673e021b072a852d1
- https://git.kernel.org/stable/c/35ab679e8bb5a81a4f922d3efbd43e32bce69274
- https://git.kernel.org/stable/c/47d253c485491caaf70d8cd8c0248ae26e42581f
- https://git.kernel.org/stable/c/518d5ddafeb084d6d9b1773ed85164300037d0e6
References (12)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/026e24cf31733dbd97f41cc9bc5273ace428eeecPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/06780473cb8a858d1d6cab2673e021b072a852d1Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/35ab679e8bb5a81a4f922d3efbd43e32bce69274Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/47d253c485491caaf70d8cd8c0248ae26e42581fPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/518d5ddafeb084d6d9b1773ed85164300037d0e6Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/76aa2440deb9a35507590f2c981a69a57ecd305dPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a0cedbcc8852d6c77b00634b81e41f17f29d9404Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c7e02ccc9fdc496fe51e440e3e66ac36509ca049SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card