PT-2024-3469 · Linux+2 · Linux Kernel+2
Published
2024-03-26
·
Updated
2025-01-14
·
CVE-2024-26653
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a double free error in the Linux kernel's USB driver, specifically in the
ljca module. When auxiliary device add() returns an error and calls auxiliary device uninit(), the callback function ljca auxdev release frees the parameter data of the ljca new client device function using kfree(auxdev->dev.platform data). However, the callers of ljca new client device should not call kfree() again to free the platform data in the error handling path. The fix involves cleaning up the redundant kfree() calls in all callers and adding kfree() for the passed-in platform data on errors that occur before auxiliary device init() succeeds.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu