Vulnerability Details : CVE-2024-42138
In the Linux kernel, the following vulnerability has been resolved:
mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
In case of invalid INI file mlxsw_linecard_types_init() deallocates memory
but doesn't reset pointer to NULL and returns 0. In case of any error
occurred after mlxsw_linecard_types_init() call, mlxsw_linecards_init()
calls mlxsw_linecard_types_fini() which performs memory deallocation again.
Add pointer reset to NULL.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Products affected by CVE-2024-42138
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2024-42138
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 16 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2024-42138
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST | 2024-12-11 |
CWE ids for CVE-2024-42138
-
The product calls free() twice on the same memory address.Assigned by: nvd@nist.gov (Primary)
References for CVE-2024-42138
-
https://git.kernel.org/stable/c/f8b55a465b0e8a500179808166fe9420f5c091a1
mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/ab557f5cd993a3201b09593633d04b891263d5c0
mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/9af7437669b72f804fc4269f487528dbbed142a2
mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/8ce34dccbe8fa7d2ef86f2d8e7db2a9b67cabfc3
mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file - kernel/git/stable/linux.git - Linux kernel stable treePatch
Jump to