CVE-2024-42069: net: mana: Fix possible double free in error handling path
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix possible double free in error handling path
When auxiliarydeviceadd() returns error and then calls auxiliarydeviceuninit(), callback function adevrelease calls kfree(madev). We shouldn't call kfree(madev) again in the error handling path. Set 'madev' to NULL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
In the error handling path, set 'madev' to NULL so that adev_release does not free the same memory twice (avoid calling kfree(madev) again after auxiliary_device_add() error -> auxiliary_device_uninit() -> adev_release).
Linux kernel net: mana madev pointer = NULL
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42069?
CVE-2024-42069 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-42069?
You can fix CVE-2024-42069 by updating to the patched versions of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1.
Which versions of the Linux kernel are affected by CVE-2024-42069?
CVE-2024-42069 affects Linux kernel versions prior to 6.3 and versions between 6.7 and 6.9.8.
What component of the Linux kernel is impacted by CVE-2024-42069?
CVE-2024-42069 impacts the net subsystem, specifically related to 'mana' and error handling in auxiliary devices.
Is CVE-2024-42069 a remote or local vulnerability?
CVE-2024-42069 is primarily a local vulnerability that could be exploited by users with sufficient privileges on the affected system.