Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-36973

misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()

Description

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), callback function gp_auxiliary_device_release() calls ida_free() and kfree(aux_device_wrapper) to free memory. We should't call them again in the error handling path. Fix this by skipping the redundant cleanup functions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 393fc2f5948fd340d016a9557eea6e1ac2f6c60c to < 34ae447b138680b5ed3660f7d935ff3faf88ba1aaffected
  • 393fc2f5948fd340d016a9557eea6e1ac2f6c60c to < 86c9713602f786f441630c4ee02891987f8618b9affected
  • 393fc2f5948fd340d016a9557eea6e1ac2f6c60c to < 1efe551982297924d05a367aa2b6ec3d275d5742affected
  • 393fc2f5948fd340d016a9557eea6e1ac2f6c60c to < 086c6cbcc563c81d55257f9b27e14faf1d0963d3affected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.95 to ≤ 6.1.*unaffected
  • 6.6.35 to ≤ 6.6.*unaffected
  • 6.9.6 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References