CVE-2024-56766

Published: Jan 6, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Calling kfree(user) will lead to a double free.

Affected (12)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	4.19.325 ≤ version < 4.20
Linux Linux Kernel	5.10.231 ≤ version < 5.11
Linux Linux Kernel	5.15.174 ≤ version < 5.16
Linux Linux Kernel	5.4.287 ≤ version < 5.5
Linux Linux Kernel	6.1.120 ≤ version < 6.1.123
Linux Linux Kernel	6.11.11 ≤ version < 6.12
Linux Linux Kernel	6.12.2 ≤ version < 6.12.8
Linux Linux Kernel	6.6.64 ≤ version < 6.6.69
Linux Linux Kernel	Version 6.13 rc1
Linux Linux Kernel	Version 6.13 rc2
Linux Linux Kernel	Version 6.13 rc3
Linux Linux Kernel	Version 6.13 rc4