CVE-2024-26652
In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function…
Does this matter?
Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path. Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.
- CVSS 3.1
- 4.1 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- EPSS
- 0.30% probability · 23th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-415
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/995f802abff209514ac2ee03b96224237646cec3Patch
- https://git.kernel.org/stable/c/ba18deddd6d502da71fd6b6143c53042271b82bdPatch
- https://git.kernel.org/stable/c/ffda0e962f270b3ec937660afd15b685263232d3Patch
- https://git.kernel.org/stable/c/995f802abff209514ac2ee03b96224237646cec3Patch
- https://git.kernel.org/stable/c/ba18deddd6d502da71fd6b6143c53042271b82bdPatch
- https://git.kernel.org/stable/c/ffda0e962f270b3ec937660afd15b685263232d3Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.