Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-37817

mcb: fix a double free bug in chameleon_parse_gdd()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcb_device_register() fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < d70184958b0ea8c0fd52e2b456654b503e769fc8affected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 4ffe8c9fb561e4427dd1a3056cd5b3685b74f78daffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 59f993cd36b6e28a394ba3d977e8ffe5c9884e3baffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < c5b8a549ef1fcc6066b037a3962c79d60465ba0baffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 96838eb1836fd372e42be5db84f0b333b65146a6affected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < df1a5d5c6134224f9298e5189230f9d29ae50cacaffected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < bcc7d58ee5173e34306026bd01e1fbf75e169d37affected
  • 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 to < 7c7f1bfdb2249f854a736d9b79778c7e5a29a150affected

Linux Linux

Default version status: affected

  • 3.15affected
  • 0 to < 3.15unaffected
  • 5.4.293 to ≤ 5.4.*unaffected
  • 5.10.237 to ≤ 5.10.*unaffected
  • 5.15.181 to ≤ 5.15.*unaffected
  • 6.1.136 to ≤ 6.1.*unaffected
  • 6.6.89 to ≤ 6.6.*unaffected
  • 6.12.26 to ≤ 6.12.*unaffected
  • 6.14.5 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References