Riskcovery

CVE-2024-38627

stm class: Fix a double free in stm_register_device()

State
Published
Severity
Not scored
Published
Jun 21, 2024
Updated
May 23, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

stm class: Fix a double free in stm_register_device()

The put_device(&stm->dev) call will trigger stm_device_release() which frees "stm" so the vfree(stm) on the next line is a double free.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before 6cc30ef8eb6d8f8d6df43152264bbf8835d99931Affected
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before a0450d3f38e7c6c0a7c0afd4182976ee15573695Affected
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before 713fc00c571dde4af3db2dbd5d1b0eadc327817bAffected
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before 7419df1acffbcc90037f6b5a2823e81389659b36Affected
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before 4bfd48bb6e62512b9c392c5002c11e1e3b18d247Affected
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before 370c480410f60b90ba3e96abe73ead21ec827b20Affected
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before d782a2db8f7ac49c33b9ca3e835500a28667d1beAffected
  • 389b6699a2aa0b457aa69986e9ddf39f3b4030fd to before 3df463865ba42b8f88a590326f4c9ea17a1ce459Affected
  • b0351a51ffda593b2b1b35dd0c00a73505edb256Affected
  • 4.4.178 to before 4.5Affected
LinuxLinux
  • 4.7Affected
  • before 4.7Not affected
  • 4.19.316 through 4.19.*Not affected
  • 5.4.278 through 5.4.*Not affected
  • 5.10.219 through 5.10.*Not affected
  • 5.15.161 through 5.15.*Not affected
  • 6.1.93 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.9.4 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.