Lucene search

K
redhatcveRedhat.comRH:CVE-2024-36890
HistoryJun 03, 2024 - 2:03 p.m.

CVE-2024-36890

2024-06-0314:03:13
redhat.com
access.redhat.com
1
cve-2024-36890
auto clean up
error pointers
linux kernel

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved: mm/slab: make __free(kfree) accept error pointers Currently, if an automatically freed allocation is an error pointer that will lead to a crash. An example of this is in wm831x_gpio_dbg_show(). 171 char *label __free(kfree) = gpiochip_dup_line_label(chip, i); 172 if (IS_ERR(label)) { 173 dev_err(wm831x->dev, “Failed to duplicate label\n”); 174 continue; 175 } The auto clean up function should check for error pointers as well, otherwise we’re going to keep hitting issues like this.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%