PT-2024-35660 · Linux+7 · Linux Kernel+7
Oleksij Rempel
·
Published
2024-11-24
·
Updated
2026-03-14
·
CVE-2024-53213
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A double free issue was found in the Linux kernel's lan78xx driver. The buffer
buf was being freed twice, once implicitly through usb free urb(dev->urb intr) with the URB FREE BUFFER flag and again explicitly by kfree(buf). This caused a double free issue. To resolve this, the kmalloc() and usb alloc urb() calls were reordered to simplify the initialization sequence, and the redundant kfree(buf) was removed. Now, buf is allocated after usb alloc urb(), ensuring it is correctly managed by usb fill int urb() and freed by usb free urb() as intended.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu