Bug 2292858 (CVE-2024-36973) - CVE-2024-36973 kernel: double free in the error handling of gp_aux_bus_probe()
Summary: CVE-2024-36973 kernel: double free in the error handling of gp_aux_bus_probe()
Keywords:
Status: NEW
Alias: CVE-2024-36973
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-06-18 06:20 UTC by Rohit Keshri
Modified: 2024-07-04 16:37 UTC (History)
48 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Rohit Keshri 2024-06-18 06:20:44 UTC 
In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()

When auxiliary_device_add() returns error and then calls
auxiliary_device_uninit(), callback function
gp_auxiliary_device_release() calls ida_free() and
kfree(aux_device_wrapper) to free memory. We should't
call them again in the error handling path.

Fix this by skipping the redundant cleanup functions.

https://git.kernel.org/stable/c/086c6cbcc563c81d55257f9b27e14faf1d0963d3
Note You need to log in before you can comment on or make changes to this bug.