CVE-2024-42147
HIGHLinux Kernel < 6.1.98 - Double Free
Title source: ruleDescription
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/debugfs - Fix debugfs uninit process issue During the zip probe process, the debugfs failure does not stop the probe. When debugfs initialization fails, jumping to the error branch will also release regs, in addition to its own rollback operation. As a result, it may be released repeatedly during the regs uninit process. Therefore, the null check needs to be added to the regs uninit process.
References (5)
Scores
CVSS v3
7.8
EPSS
0.0002
EPSS Percentile
4.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-415
Status
published
Affected Products (4)
linux/linux_kernel
< 6.1.98
linux/Kernel
< 6.1.98linux
linux/Kernel
< 6.6.39linux
linux/Kernel
< 6.9.9linux
Timeline
Published
Jul 30, 2024
Tracked Since
Feb 18, 2026