Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-26652
HistoryMar 27, 2024 - 1:53 p.m.

CVE-2024-26652 net: pds_core: Fix possible double free in error handling path

2024-03-2713:53:20
Linux
github.com
5
linux kernel
net
pds_core
fix
double free

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: pds_core: Fix possible double free in error handling path

When auxiliary_device_add() returns error and then calls
auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release
calls kfree(padev) to free memory. We shouldn’t call kfree(padev)
again in the error handling path.

Fix this by cleaning up the redundant kfree() and putting
the error handling back to where the errors happened.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-26652