High · published July 29, 2024
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix possible double free in error handling path
When auxiliary_device_add() returns error and then calls
auxiliary_device_uninit(), callback function adev_release
calls kfree(madev). We shouldn't call kfree(madev) again
in the error handling path. Set 'madev' to NULL.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 6.2 | 6.2 |
| linux/linux_kernel | ≥ 6.3, < 6.6.37 | 6.6.37 |
| linux/linux_kernel | ≥ 6.7, < 6.9.8 | 6.9.8 |