PT-2024-3361 · Linux+3 · Linux Kernel+3
Aisheng Dong
+1
·
Published
2024-03-26
·
Updated
2025-03-28
·
CVE-2024-26932
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-rc5-next-20240220-05616-g52728c567a55
Description
The issue is related to a double-free problem in the
tcpm port unregister pd() function. When unregistering pd capabilities in tcpm, KASAN captures a double-free issue. The root cause is that the same capability is freed twice, first by pd capabilities release() and then explicitly by tcpm port unregister pd(). This can lead to a denial of service or other unspecified impact.Recommendations
To fix the issue, remove the
kree() call from tcpm port unregister pd().
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Suse
Ubuntu