CVE-2024-42138

Katalog CVE

CVSS 7.8 · High EPSS 0,23%

Kerentanan Double Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file In case of invalid INI file mlxsw_linecard_types_init() deallocates memory but doesn't reset pointer to NULL and returns 0. In case of any error occurred after mlxsw_linecard_types_init() call, mlxsw_linecards_init() calls mlxsw_linecard_types_fini() which performs memory deallocation again. Add pointer reset to NULL. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Rincian

Terbit di NVD

30 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 13,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/8ce34dccbe8fa7d2ef86f2d8e7db2a9b67cabfc3 patch
• https://git.kernel.org/stable/c/9af7437669b72f804fc4269f487528dbbed142a2 patch
• https://git.kernel.org/stable/c/ab557f5cd993a3201b09593633d04b891263d5c0 patch
• https://git.kernel.org/stable/c/f8b55a465b0e8a500179808166fe9420f5c091a1 patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html