Description
In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() For bus_register(), any error which happens after kset_register() will cause that @priv are freed twice, fixed by setting @priv with NULL after the first free.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
3465e2e4a24eef9bc9f21aa29d83fd7000c1da48 to < d885c464c25018b81a6b58f5d548fc2e3ef87dd1affected3465e2e4a24eef9bc9f21aa29d83fd7000c1da48 to < 9ce15f68abedfae7ae0a35e95895aeddfd0f0c6aaffected3465e2e4a24eef9bc9f21aa29d83fd7000c1da48 to < bfa54a793ba77ef696755b66f3ac4ed00c7d1248affected
Linux Linux
Default version status: affected
6.3affected0 to < 6.3unaffected6.6.57 to ≤ 6.6.*unaffected6.11.4 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d885c464c25018b81a6b58f5d548fc2e3ef87dd1 ↗
- https://git.kernel.org/stable/c/9ce15f68abedfae7ae0a35e95895aeddfd0f0c6a ↗
- https://git.kernel.org/stable/c/bfa54a793ba77ef696755b66f3ac4ed00c7d1248 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗