← CVE Intelligence

CVE-2024-36940

pinctrl: core: delete incorrect free in pinctrl_enable() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freeing it in pinctrl_enable() will lead to a double free. The devm_pinctrl_dev_release() function frees the pindescs and destroys the mutex as well.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 6118714275f0a313ecc296a87ed1af32d9691bed before 735f4c6b6771eafe336404c157ca683ad72a040d; affected 6118714275f0a313ecc296a87ed1af32d9691bed before cdaa171473d98962ae86f2a663d398fda2fbeefd; affected 6118714275f0a313ecc296a87ed1af32d9691bed before 288bc4aa75f150d6f1ee82dd43c6da1b438b6068; affected 6118714275f0a313ecc296a87ed1af32d9691bed before 41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca; affected 6118714275f0a313ecc296a87ed1af32d9691bed before ac7d65795827dc0cf7662384ed27caf4066bd72e; affected 6118714275f0a313ecc296a87ed1af32d9691bed before 558c8039fdf596a584a92c171cbf3298919c448c; affected 6118714275f0a313ecc296a87ed1af32d9691bed before f9f1e321d53e4c5b666b66e5b43da29841fb55ba; affected 6118714275f0a313ecc296a87ed1af32d9691bed before 5038a66dad0199de60e5671603ea6623eb9e5c79
Linux / Linuxaffected 4.11; unaffected 0 before 4.11; unaffected 4.19.314 through 4.19.*; unaffected 5.4.276 through 5.4.*; unaffected 5.10.217 through 5.10.*; unaffected 5.15.159 through 5.15.*; unaffected 6.1.91 through 6.1.*; unaffected 6.6.31 through 6.6.*; unaffected 6.8.10 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

siemens-SADP

No English description supplied.