CVEvulnerability
CVE-2024-36940
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-05-30
- Last modified
- 2026-10-15
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-415
Description
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: core: delete incorrect free in pinctrl_enable()
The "pctldev" struct is allocated in devm_pinctrl_register_and_init().
It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(),
so freeing it in pinctrl_enable() will lead to a double free.
The devm_pinctrl_dev_release() function frees the pindescs and destroys
the mutex as well.
Affected configurations
• linux linux kernel (>= 4.11 < 4.19.314)
• linux linux kernel (>= 4.20 < 5.4.276)
• linux linux kernel (>= 5.5 < 5.10.217)
• linux linux kernel (>= 5.11 < 5.15.159)
• linux linux kernel (>= 5.16 < 6.1.91)
• linux linux kernel (>= 6.2 < 6.6.31)
• linux linux kernel (>= 6.7 < 6.8.10)
• linux linux kernel 6.9
• debian debian linux 10.0
Related
Weakness · CWE (1)
- CWE-415 Double Free weakness
References
- https://git.kernel.org/stable/c/288bc4aa75f150d6f1ee82dd43c6da1b438b6068 Patch
- https://git.kernel.org/stable/c/41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca Patch
- https://git.kernel.org/stable/c/5038a66dad0199de60e5671603ea6623eb9e5c79 Patch
- https://git.kernel.org/stable/c/558c8039fdf596a584a92c171cbf3298919c448c Patch
- https://git.kernel.org/stable/c/735f4c6b6771eafe336404c157ca683ad72a040d Patch
- https://git.kernel.org/stable/c/ac7d65795827dc0cf7662384ed27caf4066bd72e Patch
- https://git.kernel.org/stable/c/cdaa171473d98962ae86f2a663d398fda2fbeefd Patch
- https://git.kernel.org/stable/c/f9f1e321d53e4c5b666b66e5b43da29841fb55ba Patch
- https://git.kernel.org/stable/c/288bc4aa75f150d6f1ee82dd43c6da1b438b6068 Patch
- https://git.kernel.org/stable/c/41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca Patch
- https://git.kernel.org/stable/c/5038a66dad0199de60e5671603ea6623eb9e5c79 Patch
- https://git.kernel.org/stable/c/558c8039fdf596a584a92c171cbf3298919c448c Patch
- https://git.kernel.org/stable/c/735f4c6b6771eafe336404c157ca683ad72a040d Patch
- https://git.kernel.org/stable/c/ac7d65795827dc0cf7662384ed27caf4066bd72e Patch
- https://git.kernel.org/stable/c/cdaa171473d98962ae86f2a663d398fda2fbeefd Patch
- https://git.kernel.org/stable/c/f9f1e321d53e4c5b666b66e5b43da29841fb55ba Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html Mailing List
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html cert-portal.siemens.com