CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()
In the Linux kernel, the following vulnerability has been resolved:
clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clkmt8135apmixedprobe()
'clkdata' is allocated with mtkdevmallocclkdata(). So calling mtkfreeclkdata() explicitly in the remove function would lead to a double-free.
Remove the redundant call.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27433?
The severity of CVE-2024-27433 is classified as moderate due to the impact on error handling in the Linux kernel.
How do I fix CVE-2024-27433?
To fix CVE-2024-27433, you should upgrade to the fixed versions of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Which versions of Linux kernel are affected by CVE-2024-27433?
CVE-2024-27433 affects Linux kernel versions from 6.4 up to, but not including, 6.6.23 and from 6.7 to 6.7.11 and from 6.8 to 6.8.2.
Is CVE-2024-27433 related to a specific Linux distribution?
Yes, CVE-2024-27433 is particularly noted in the Debian Linux packages.
What components are impacted by CVE-2024-27433 in the Linux kernel?
CVE-2024-27433 impacts the clk subsystem in the Mediatek APMIXEDSYS clock handling.