Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2024-26652

net: pds_core: Fix possible double free in error handling path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path. Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4569cce43bc61e4cdd76597a1cf9b608846c18cc to < 995f802abff209514ac2ee03b96224237646cec3affected
  • 4569cce43bc61e4cdd76597a1cf9b608846c18cc to < ffda0e962f270b3ec937660afd15b685263232d3affected
  • 4569cce43bc61e4cdd76597a1cf9b608846c18cc to < ba18deddd6d502da71fd6b6143c53042271b82bdaffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.22 to ≤ 6.6.*unaffected
  • 6.7.10 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References