CVE-2024-57887 Details

A use-after-free vulnerability has been identified in the Linux kernel's DRM subsystem, specifically within the ADV7511 driver. The issue arises in the 'adv7533_attach_dsi()' function, which improperly uses a pointer that has already been freed. This vulnerability was introduced when the 'host_node' pointer was assigned and then released in the 'adv7533_parse_dt()' function. The problem is resolved by removing the 'of_node_put()' call in 'adv7533_parse_dt()' and instead placing it in the error handling path of the 'probe()' function and the 'remove()' function.