CVE-2024-27433 — Double Free in Linux
Severity
7.8HIGHNVD
OSV5.5
EPSS
0.0%
top 91.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 17
Latest updateJul 4
Description
In the Linux kernel, the following vulnerability has been resolved:
clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()
'clk_data' is allocated with mtk_devm_alloc_clk_data(). So calling
mtk_free_clk_data() explicitly in the remove function would lead to a
double-free.
Remove the redundant call.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages9 packages
▶CVEListV5linux/linuxc50e2ea6507bcf5a4475f821fc03dd1fdcb894a7 — de3340533bd68a7b3d6be1841b8eb3fa6c762fe6+4
Patches
🔴Vulnerability Details
7📋Vendor Advisories
8💬Community
1Bugzilla▶
CVE-2024-27433 kernel: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()↗2024-05-17