In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free. Introduced by: https://github.com/torvalds/linux/commit/dbad75dd1f25e0107c643d42774a7f9a8ba85e9b Fixed by: https://github.com/torvalds/linux/commit/251e22abde21833b3d29577e4d8c7aaccd650eee Re-introduced by (only in rc release): https://github.com/torvalds/linux/commit/3bfd44306c65d073008b9ca8f062249f35576b61 Fixed again by: https://github.com/torvalds/linux/commit/8dca4a41f1ad65043a78c2338d9725f859c8d2c3
Statement: This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and 7, and Red Hat Enterprise MRG as they did not include the vulnerable code.