CVE-2024-50012

What it actually does

Failure to decrement reference count on CPU device node in parse_perf_domain when of_parse_phandle_with_args returns error, resulting in reference count imbalance that can cause memory corruption or denial of service.

Why it matters to the business

Potential system crashes or instability on Linux systems using cpufreq, affecting service availability. Widespread in Linux ecosystem with low immediate exploit risk.

How an attack unfolds

Local attacker triggers error path in parse_perf_domain function through device tree manipulation or specific hardware configurations, exploiting the missing reference decrement to induce corruption.

How to fix it

Update Linux kernel to include commit 6c3d8387839252f1a0fc6367f314446e4a2ebd0b or apply Rocky Linux mutt package fix 5:2.0.7-1.el8.

How to confirm the fix worked

Confirm presence of __free(device_node) cleanup attribute in parse_perf_domain function or verify installed kernel and package versions match fixed releases.

Typical attack path

1. Gain local access to affected Linux system
2. Trigger error condition in parse_perf_domain via crafted device tree or perf domain setup
3. Exploit reference count leak to induce memory corruption or crash

How to detect it

Review kernel logs and dmesg for oops/panics involving device_node references or cpufreq perf_domain parsing failures.

What your security team should do

• Apply kernel and package updates to fixed versions immediately
• Limit local user access on critical systems
• Monitor kernel logs for cpufreq-related panics