CVE-2024-26652

Katalog CVE

CVSS 4.1 · Medium EPSS 0,30%

Kerentanan Double Free pada linux kernel. Skor CVSS 3.1 4.1 (Medium) menurut CISA ADP.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path. Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

Rincian

Terbit di NVD

27 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.1 (Medium), sumber CISA ADP
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/995f802abff209514ac2ee03b96224237646cec3 patch
• https://git.kernel.org/stable/c/ba18deddd6d502da71fd6b6143c53042271b82bd patch
• https://git.kernel.org/stable/c/ffda0e962f270b3ec937660afd15b685263232d3 patch