CVE-2024-50055

In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() For bus_register(), any error which happens after kset_register() will cause that @priv are freed twice, fixed by setting @priv with NULL after the first free.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

23 Oct 2024, 21:45

Type Values Removed Values Added
CWE CWE-415
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/9ce15f68abedfae7ae0a35e95895aeddfd0f0c6a - () https://git.kernel.org/stable/c/9ce15f68abedfae7ae0a35e95895aeddfd0f0c6a - Patch
References () https://git.kernel.org/stable/c/bfa54a793ba77ef696755b66f3ac4ed00c7d1248 - () https://git.kernel.org/stable/c/bfa54a793ba77ef696755b66f3ac4ed00c7d1248 - Patch
References () https://git.kernel.org/stable/c/d885c464c25018b81a6b58f5d548fc2e3ef87dd1 - () https://git.kernel.org/stable/c/d885c464c25018b81a6b58f5d548fc2e3ef87dd1 - Patch
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
First Time Linux linux Kernel
Linux

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: núcleo del controlador: bus: se corrige la doble liberación en la API del controlador bus_register() Para bus_register(), cualquier error que ocurra después de kset_register() provocará que @priv se libere dos veces, lo que se soluciona configurando @priv con NULL después de la primera liberación.

21 Oct 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-21 20:15

Updated : 2024-10-23 21:45


NVD link : CVE-2024-50055

Mitre link : CVE-2024-50055

CVE.ORG link : CVE-2024-50055


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free