Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-42138

mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file

Description

In the Linux kernel, the following vulnerability has been resolved: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file In case of invalid INI file mlxsw_linecard_types_init() deallocates memory but doesn't reset pointer to NULL and returns 0. In case of any error occurred after mlxsw_linecard_types_init() call, mlxsw_linecards_init() calls mlxsw_linecard_types_fini() which performs memory deallocation again. Add pointer reset to NULL. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to < ab557f5cd993a3201b09593633d04b891263d5c0affected
  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to < f8b55a465b0e8a500179808166fe9420f5c091a1affected
  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to < 9af7437669b72f804fc4269f487528dbbed142a2affected
  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to < 8ce34dccbe8fa7d2ef86f2d8e7db2a9b67cabfc3affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.1.98 to ≤ 6.1.*unaffected
  • 6.6.39 to ≤ 6.6.*unaffected
  • 6.9.9 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References