Description
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf' In fastrpc_req_mmap() error path, the fastrpc buffer is freed in fastrpc_req_munmap_impl() if unmap is successful. But in the end, there is an unconditional call to fastrpc_buf_free(). So the above case triggers the double free of fastrpc buf.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
13327ed95222e70fa98805382b65636b872d87cb to < 4753cc37b6606ef9a7ec22861d380d45e2707f9aaffected72fa6f7820c4cf96c5f7aabc4e54bdf52d1e2ac2 to < f77dc8a75859e559f3238a6d906206259227985eaffected72fa6f7820c4cf96c5f7aabc4e54bdf52d1e2ac2 to < bfc1704d909dc9911a558b1a5833d3d61a43a1f2affected72fa6f7820c4cf96c5f7aabc4e54bdf52d1e2ac2 to < e8c276d4dc0e19ee48385f74426aebc855b49aafaffected911737ad0c860251f640a05feb75f9dc7e41f0d7affectedb10e064ca0f708c4b4401ac5eab0f76cf7cec93daffected5.10.267 to < 5.11affected5.15.218 to < 5.16affected
Linux Linux
Default version status: affected
6.2affected0 to < 6.2unaffected6.6.51 to ≤ 6.6.*unaffected6.10.10 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected