Riskcovery

CVE-2024-42069

net: mana: Fix possible double free in error handling path

State
Published
Severity
7.8 High
Published
Jul 29, 2024
Updated
Aug 5, 2026
Reserved
Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Fix possible double free in error handling path

When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), callback function adev_release calls kfree(madev). We shouldn't call kfree(madev) again in the error handling path. Set 'madev' to NULL.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a69839d4327d053b18d8e1b0e7ddeee78db78f4f to before 3243e64eb4d897c3eeb48b2a7221ab5a95e1282aAffected
  • a69839d4327d053b18d8e1b0e7ddeee78db78f4f to before ed45c0a0b662079d4c0e518014cc148c753979b4Affected
  • a69839d4327d053b18d8e1b0e7ddeee78db78f4f to before 1864b8224195d0e43ddb92a8151f54f6562090ccAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.37 through 6.6.*Not affected
  • 6.9.8 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.