7.8

CVE-2025-37817

mcb: fix a double free bug in chameleon_parse_gdd()

In the Linux kernel, the following vulnerability has been resolved:

mcb: fix a double free bug in chameleon_parse_gdd()

In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev'
would be released in mcb_device_register() via put_device().
Thus, goto 'err' label and free 'mdev' again causes a double free.
Just return if mcb_device_register() fails.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.15 < 5.4.293
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.237
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.181
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.136
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.89
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.26
Linux ≫ Linux Kernel Version >= 6.13 < 6.14.5
Linux ≫ Linux Kernel Version6.15 Updaterc1
Linux ≫ Linux Kernel Version6.15 Updaterc2
Linux ≫ Linux Kernel Version6.15 Updaterc3
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.074
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-415 Double Free

The product calls free() twice on the same memory address.

https://git.kernel.org/stable/c/d70184958b0ea8c0fd52e2b456654b503e769fc8
Patch
https://git.kernel.org/stable/c/4ffe8c9fb561e4427dd1a3056cd5b3685b74f78d
Patch
https://git.kernel.org/stable/c/59f993cd36b6e28a394ba3d977e8ffe5c9884e3b
Patch
https://git.kernel.org/stable/c/c5b8a549ef1fcc6066b037a3962c79d60465ba0b
Patch
https://git.kernel.org/stable/c/96838eb1836fd372e42be5db84f0b333b65146a6
Patch
https://git.kernel.org/stable/c/df1a5d5c6134224f9298e5189230f9d29ae50cac
Patch
https://git.kernel.org/stable/c/bcc7d58ee5173e34306026bd01e1fbf75e169d37
Patch
https://git.kernel.org/stable/c/7c7f1bfdb2249f854a736d9b79778c7e5a29a150
Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
Third Party Advisory
Mailing List