Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42069
HistoryJul 29, 2024 - 3:52 p.m.

CVE-2024-42069 net: mana: Fix possible double free in error handling path

2024-07-2915:52:33
Linux
github.com
2
linux kernel
cve-2024-42069
fix
double free
vulnerability
net
mana
error handling
linux
kernel

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Fix possible double free in error handling path

When auxiliary_device_add() returns error and then calls
auxiliary_device_uninit(), callback function adev_release
calls kfree(madev). We shouldn’t call kfree(madev) again
in the error handling path. Set ‘madev’ to NULL.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial