Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-53997

thermal: of: fix double-free on unregistration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: of: fix double-free on unregistration Since commit 3d439b1a2ad3 ("thermal/core: Alloc-copy-free the thermal zone parameters structure"), thermal_zone_device_register() allocates a copy of the tzp argument and frees it when unregistering, so thermal_of_zone_register() now ends up leaking its original tzp and double-freeing the tzp copy. Fix this by locating tzp on stack instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3d439b1a2ad36c8b4ea151c8de25309d60d17407 to < adce49089412a9ae28f5c666e0bb12fbcd86b3f7affected
  • 3d439b1a2ad36c8b4ea151c8de25309d60d17407 to < ac4436a5b20e0ef1f608a9ef46c08d5d142f8da6affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.4.8 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References