CVE-2024-36973
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-36973
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-36973.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-36973
- Downstream
- Related
- Published
- 2024-06-17T18:15:17Z
- Modified
- 2025-08-09T19:01:27Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbus_probe()
When auxiliarydeviceadd() returns error and then calls auxiliarydeviceuninit(), callback function gpauxiliarydevicerelease() calls idafree() and kfree(auxdevicewrapper) to free memory. We should't call them again in the error handling path.
Fix this by skipping the redundant cleanup functions.
- References