CVE-2024-36890CWE-763

CVE-2024-36890

High · published May 30, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm/slab: make __free(kfree) accept error pointers

Currently, if an automatically freed allocation is an error pointer that

will lead to a crash. An example of this is in wm831x_gpio_dbg_show().

171 char *label __free(kfree) = gpiochip_dup_line_label(chip, i);

172 if (IS_ERR(label)) {

173 dev_err(wm831x->dev, "Failed to duplicate label\n");

174 continue;

175 }

The auto clean up function should check for error pointers as well,

otherwise we're going to keep hitting issues like this.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-763 · Release of Invalid Pointer or Reference
Published
2024-05-30T20:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1.79, < 6.1.916.1.91
linux/linux_kernel≥ 6.5, < 6.6.316.6.31
linux/linux_kernel≥ 6.7, < 6.8.106.8.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (10)
EPSS history
Timeline
  • 30 MAY 15:28Z
    mm/slab: make __free(kfree) accept error pointers
    cvelistv5