Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-26652
HistoryMar 27, 2024 - 12:00 a.m.

CVE-2024-26652

2024-03-2700:00:00
ubuntu.com
ubuntu.com
15
linux kernel
vulnerability
resolved
net
pds_core
double free
error handling
memory
error
cleanup
unix

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: net:
pds_core: Fix possible double free in error handling path When
auxiliary_device_add() returns error and then calls
auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls
kfree(padev) to free memory. We shouldn’t call kfree(padev) again in the
error handling path. Fix this by cleaning up the redundant kfree() and
putting the error handling back to where the errors happened.

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.5%