Home

Description

In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() For bus_register(), any error which happens after kset_register() will cause that @priv are freed twice, fixed by setting @priv with NULL after the first free.

PUBLISHED Reserved 2024-10-21 | Published 2024-10-21 | Updated 2025-11-03 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 87bc3cb23c56de2c5e14a58d87cf953e7a2508f8
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 5be4bc1c73ca389a96d418a52054d897c6fe6d21
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 4797953712214ea57a437443bb0ad6d1e0646d70
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before fc1f391a71a3ee88291e205cffd673fe24d99266
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before d885c464c25018b81a6b58f5d548fc2e3ef87dd1
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 9ce15f68abedfae7ae0a35e95895aeddfd0f0c6a
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before bfa54a793ba77ef696755b66f3ac4ed00c7d1248
affected

Default status
affected

5.4.291 (semver)
unaffected

5.10.231 (semver)
unaffected

5.15.174 (semver)
unaffected

6.1.120 (semver)
unaffected

6.6.57 (semver)
unaffected

6.11.4 (semver)
unaffected

6.12 (original_commit_for_fix)
unaffected

References

lists.debian.org/debian-lts-announce/2025/03/msg00001.html

lists.debian.org/debian-lts-announce/2025/03/msg00002.html

git.kernel.org/...c/87bc3cb23c56de2c5e14a58d87cf953e7a2508f8

git.kernel.org/...c/5be4bc1c73ca389a96d418a52054d897c6fe6d21

git.kernel.org/...c/4797953712214ea57a437443bb0ad6d1e0646d70

git.kernel.org/...c/fc1f391a71a3ee88291e205cffd673fe24d99266

git.kernel.org/...c/d885c464c25018b81a6b58f5d548fc2e3ef87dd1

git.kernel.org/...c/9ce15f68abedfae7ae0a35e95895aeddfd0f0c6a

git.kernel.org/...c/bfa54a793ba77ef696755b66f3ac4ed00c7d1248

cve.org (CVE-2024-50055)

nvd.nist.gov (CVE-2024-50055)