Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-42069

net: mana: Fix possible double free in error handling path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), callback function adev_release calls kfree(madev). We shouldn't call kfree(madev) again in the error handling path. Set 'madev' to NULL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a69839d4327d053b18d8e1b0e7ddeee78db78f4f to < 3243e64eb4d897c3eeb48b2a7221ab5a95e1282aaffected
  • a69839d4327d053b18d8e1b0e7ddeee78db78f4f to < ed45c0a0b662079d4c0e518014cc148c753979b4affected
  • a69839d4327d053b18d8e1b0e7ddeee78db78f4f to < 1864b8224195d0e43ddb92a8151f54f6562090ccaffected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.37 to ≤ 6.6.*unaffected
  • 6.9.8 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References