Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() memory A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded(). However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory. Drop the manual kfree() loop and let devres handle the cleanup.
Product status
0ec6bd16705fe21d6429d6b8f7981eae2142bba8 (git) before d472d1a52985211b92883bb64bbe710b45980190
0ec6bd16705fe21d6429d6b8f7981eae2142bba8 (git) before 1a82c3272626db9006f4c2cad3adf2916417aed6
0ec6bd16705fe21d6429d6b8f7981eae2142bba8 (git) before fe757092d2329c397ecb32f2bf68a5b1c4bd9193
f8434b8ba437d3f6cbcd9ffe8405bd16ed28fc5c (git)
6.14.9 (semver) before 6.15
6.15
Any version before 6.15
6.18.21 (semver)
6.19.11 (semver)
7.0 (original_commit_for_fix)
References
git.kernel.org/...c/d472d1a52985211b92883bb64bbe710b45980190
git.kernel.org/...c/1a82c3272626db9006f4c2cad3adf2916417aed6
git.kernel.org/...c/fe757092d2329c397ecb32f2bf68a5b1c4bd9193