Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-36940

pinctrl: core: delete incorrect free in pinctrl_enable()

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freeing it in pinctrl_enable() will lead to a double free. The devm_pinctrl_dev_release() function frees the pindescs and destroys the mutex as well.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6118714275f0a313ecc296a87ed1af32d9691bed to < 735f4c6b6771eafe336404c157ca683ad72a040daffected
  • 6118714275f0a313ecc296a87ed1af32d9691bed to < cdaa171473d98962ae86f2a663d398fda2fbeefdaffected
  • 6118714275f0a313ecc296a87ed1af32d9691bed to < 288bc4aa75f150d6f1ee82dd43c6da1b438b6068affected
  • 6118714275f0a313ecc296a87ed1af32d9691bed to < 41f88ef8ba387a12f4a2b8c400b6c9e8e54b2ccaaffected
  • 6118714275f0a313ecc296a87ed1af32d9691bed to < ac7d65795827dc0cf7662384ed27caf4066bd72eaffected
  • 6118714275f0a313ecc296a87ed1af32d9691bed to < 558c8039fdf596a584a92c171cbf3298919c448caffected
  • 6118714275f0a313ecc296a87ed1af32d9691bed to < f9f1e321d53e4c5b666b66e5b43da29841fb55baaffected
  • 6118714275f0a313ecc296a87ed1af32d9691bed to < 5038a66dad0199de60e5671603ea6623eb9e5c79affected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 4.19.314 to ≤ 4.19.*unaffected
  • 5.4.276 to ≤ 5.4.*unaffected
  • 5.10.217 to ≤ 5.10.*unaffected
  • 5.15.159 to ≤ 5.15.*unaffected
  • 6.1.91 to ≤ 6.1.*unaffected
  • 6.6.31 to ≤ 6.6.*unaffected
  • 6.8.10 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References