CVE - CVE-2024-36940

CVE-ID
CVE-2024-36940	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freeing it in pinctrl_enable() will lead to a double free. The devm_pinctrl_dev_release() function frees the pindescs and destroys the mutex as well.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/288bc4aa75f150d6f1ee82dd43c6da1b438b6068 URL:https://git.kernel.org/stable/c/288bc4aa75f150d6f1ee82dd43c6da1b438b6068 MISC:https://git.kernel.org/stable/c/41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca URL:https://git.kernel.org/stable/c/41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca MISC:https://git.kernel.org/stable/c/5038a66dad0199de60e5671603ea6623eb9e5c79 URL:https://git.kernel.org/stable/c/5038a66dad0199de60e5671603ea6623eb9e5c79 MISC:https://git.kernel.org/stable/c/558c8039fdf596a584a92c171cbf3298919c448c URL:https://git.kernel.org/stable/c/558c8039fdf596a584a92c171cbf3298919c448c MISC:https://git.kernel.org/stable/c/735f4c6b6771eafe336404c157ca683ad72a040d URL:https://git.kernel.org/stable/c/735f4c6b6771eafe336404c157ca683ad72a040d MISC:https://git.kernel.org/stable/c/ac7d65795827dc0cf7662384ed27caf4066bd72e URL:https://git.kernel.org/stable/c/ac7d65795827dc0cf7662384ed27caf4066bd72e MISC:https://git.kernel.org/stable/c/cdaa171473d98962ae86f2a663d398fda2fbeefd URL:https://git.kernel.org/stable/c/cdaa171473d98962ae86f2a663d398fda2fbeefd MISC:https://git.kernel.org/stable/c/f9f1e321d53e4c5b666b66e5b43da29841fb55ba URL:https://git.kernel.org/stable/c/f9f1e321d53e4c5b666b66e5b43da29841fb55ba
Assigning CNA
kernel.org
Date Record Created
20240530	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240530)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)