CVE - CVE-2024-53213

CVE-ID
CVE-2024-53213	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xx_probe(), the buffer `buf` was being freed twice: once implicitly through `usb_free_urb(dev->urb_intr)` with the `URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused a double free issue. To resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to simplify the initialization sequence and removed the redundant `kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring it is correctly managed by `usb_fill_int_urb()` and freed by `usb_free_urb()` as intended.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/03819abbeb11117dcbba40bfe322b88c0c88a6b6 URL:https://git.kernel.org/stable/c/03819abbeb11117dcbba40bfe322b88c0c88a6b6 MISC:https://git.kernel.org/stable/c/7ac9f3c981eeceee2ec4d30d850f4a6f50a1ec40 URL:https://git.kernel.org/stable/c/7ac9f3c981eeceee2ec4d30d850f4a6f50a1ec40 MISC:https://git.kernel.org/stable/c/977128343fc2a30737399b58df8ea77e94f164bd URL:https://git.kernel.org/stable/c/977128343fc2a30737399b58df8ea77e94f164bd MISC:https://git.kernel.org/stable/c/a422ebec863d99d5607fb41bb7af3347fcb436d3 URL:https://git.kernel.org/stable/c/a422ebec863d99d5607fb41bb7af3347fcb436d3 MISC:https://git.kernel.org/stable/c/b09512aea6223eec756f52aa584fc29eeab57480 URL:https://git.kernel.org/stable/c/b09512aea6223eec756f52aa584fc29eeab57480
Assigning CNA
kernel.org
Date Record Created
20241119	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241119)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)