CVE-2024-42138

mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file

published July 30, 2024

CVSS
—
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file

In case of invalid INI file mlxsw_linecard_types_init() deallocates memory

but doesn't reset pointer to NULL and returns 0. In case of any error

occurred after mlxsw_linecard_types_init() call, mlxsw_linecards_init()

calls mlxsw_linecard_types_fini() which performs memory deallocation again.

Add pointer reset to NULL.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2024-07-30T07:46Z
EPSS history
Timeline
  • 30 JUL 07:46Z
    mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
    cvelistv5