CVE-2025-38313

bus: fsl-mc: fix double-free on mc_dev

published July 10, 2025

CVSS
—
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bus: fsl-mc: fix double-free on mc_dev

The blamed commit tried to simplify how the deallocations are done but,

in the process, introduced a double-free on the mc_dev variable.

In case the MC device is a DPRC, a new mc_bus is allocated and the

mc_dev variable is just a reference to one of its fields. In this

circumstance, on the error path only the mc_bus should be freed.

This commit introduces back the following checkpatch warning which is a

false-positive.

WARNING: kfree(NULL) is safe and this check is probably not required

+ if (mc_bus)

+ kfree(mc_bus);

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Published
2025-07-10T07:42Z
EPSS history
Timeline
  • 10 JUL 07:42Z
    bus: fsl-mc: fix double-free on mc_dev
    cvelistv5