← Back

CVE-2024-53213

nvd nist
Published: Dec 27, 2024Modified: Jun 1, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xx_probe(), the buffer `buf` was being freed twice: once implicitly through `usb_free_urb(dev->urb_intr)` with the `URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused a double free issue. To resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to simplify the initialization sequence and removed the redundant `kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring it is correctly managed by `usb_fill_int_urb()` and freed by `usb_free_urb()` as intended.

Affected (4)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 5.17 to 6.1.120
From 6.12 to 6.12.2
From 6.2 to 6.6.64
From 6.7 to 6.11.11

References (8)

Timeline

No history available yet.