Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q6fw-pgc6-r84c

Опубликовано: 27 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.1

Описание

In the Linux kernel, the following vulnerability has been resolved:

net: pds_core: Fix possible double free in error handling path

When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path.

Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

In the Linux kernel, the following vulnerability has been resolved:

net: pds_core: Fix possible double free in error handling path

When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path.

Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

EPSS

Процентиль: 5%
0.00025
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 4.1
ubuntu
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path. Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

CVSS3: 6.7
redhat
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path. Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

CVSS3: 4.1
nvd
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path. Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

CVSS3: 4.1
debian
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 7.8
fstec
больше 1 года назад

Уязвимость функции pdsc_auxbus_dev_register() в модуле drivers/net/ethernet/amd/pds_core/auxbus.c драйвера сетевых устройств AMD ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 5%
0.00025
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-415