Riskcovery

CVE-2024-42138

mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file

State
Published
Severity
Not scored
Published
Jul 30, 2024
Updated
May 11, 2026
Reserved
Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file

In case of invalid INI file mlxsw_linecard_types_init() deallocates memory but doesn't reset pointer to NULL and returns 0. In case of any error occurred after mlxsw_linecard_types_init() call, mlxsw_linecards_init() calls mlxsw_linecard_types_fini() which performs memory deallocation again.

Add pointer reset to NULL.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to before ab557f5cd993a3201b09593633d04b891263d5c0Affected
  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to before f8b55a465b0e8a500179808166fe9420f5c091a1Affected
  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to before 9af7437669b72f804fc4269f487528dbbed142a2Affected
  • b217127e5e4ee0ecfce7c5f84cfe082238123bda to before 8ce34dccbe8fa7d2ef86f2d8e7db2a9b67cabfc3Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.98 through 6.1.*Not affected
  • 6.6.39 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.