CVE-2025-37817

mcb: fix a double free bug in chameleon_parse_gdd()

published May 8, 2025

CVSS
—
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mcb: fix a double free bug in chameleon_parse_gdd()

In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev'

would be released in mcb_device_register() via put_device().

Thus, goto 'err' label and free 'mdev' again causes a double free.

Just return if mcb_device_register() fails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Published
2025-05-08T06:26Z
EPSS history
Timeline
  • 08 MAY 06:26Z
    mcb: fix a double free bug in chameleon_parse_gdd()
    cvelistv5