CVE-2024-38627

stm class: Fix a double free in stm_register_device()

published June 21, 2024

CVSS
—
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

stm class: Fix a double free in stm_register_device()

The put_device(&stm->dev) call will trigger stm_device_release() which

frees "stm" so the vfree(stm) on the next line is a double free.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.7th percentile
Published
2024-06-21T10:18Z
EPSS history
Timeline
  • 21 JUN 10:18Z
    stm class: Fix a double free in stm_register_device()
    cvelistv5