PT-2025-8767 · Linux+11 · Linux Kernel+11
Laurent Pinchart
·
Published
2024-11-08
·
Updated
2026-04-20
·
CVE-2024-57980
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A double free issue in the Linux kernel's uvcvideo module has been identified. The problem occurs when the
uvc status init() function fails to allocate the int urb, resulting in the dev->status pointer being freed but not reset to NULL. This leads to a double-free attempt when uvc status cleanup() is called. The issue is resolved by resetting the dev->status pointer to NULL after it is freed.Recommendations
For the affected Linux kernel version, apply the fix that resets the
dev->status pointer to NULL after freeing it to prevent the double-free issue.Exploit
Fix
DoS
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu