PT-2024-29725 · Linux+6 · Linux Kernel+6

Published

2024-06-25

·

Updated

2025-09-29

·

CVE-2024-42069

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A possible double free issue in the error handling path of the Linux kernel's net: mana module has been resolved. When auxiliary device add() returns an error and then calls auxiliary device uninit(), the callback function adev release calls kfree(madev). To fix this, madev is set to NULL to prevent calling kfree(madev) again in the error handling path.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476CWE-415

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-10855
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-47095
AZL-47180
BDU:2025-02999
CVE-2024-42069
DLA-4102-1
OESA-2024-2076
OPENSUSE-SU-2024_3190-1
OPENSUSE-SU-2024_3209-1
OPENSUSE-SU-2024_3483-1
SUSE-SU-2024:3190-1
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3209-1
SUSE-SU-2024:3383-1
SUSE-SU-2024:3483-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1
USN-7420-1
USN-7421-1
USN-7460-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu