CVE-2024-46741

Katalog CVE

CVSS 7.8 · High EPSS 0,24%

Kerentanan Double Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf' In fastrpc_req_mmap() error path, the fastrpc buffer is freed in fastrpc_req_munmap_impl() if unmap is successful. But in the end, there is an unconditional call to fastrpc_buf_free(). So the above case triggers the double free of fastrpc buf.

Rincian

Terbit di NVD

18 September 2024

Terakhir diubah

27 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/bfc1704d909dc9911a558b1a5833d3d61a43a1f2 patch
• https://git.kernel.org/stable/c/e8c276d4dc0e19ee48385f74426aebc855b49aaf patch
• https://git.kernel.org/stable/c/f77dc8a75859e559f3238a6d906206259227985e patch
• https://git.kernel.org/stable/c/4753cc37b6606ef9a7ec22861d380d45e2707f9a