CVE-2024-26653

usb: misc: ljca: Fix double free in error handling path

published April 1, 2024

CVSS
—
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: misc: ljca: Fix double free in error handling path

When auxiliary_device_add() returns error and then calls

auxiliary_device_uninit(), callback function ljca_auxdev_release

calls kfree(auxdev->dev.platform_data) to free the parameter data

of the function ljca_new_client_device. The callers of

ljca_new_client_device shouldn't call kfree() again

in the error handling path to free the platform data.

Fix this by cleaning up the redundant kfree() in all callers and

adding kfree() the passed in platform_data on errors which happen

before auxiliary_device_init() succeeds .

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Published
2024-04-01T08:33Z
EPSS history
Timeline
  • 01 APR 08:33Z
    usb: misc: ljca: Fix double free in error handling path
    cvelistv5