← CVE Intelligence

CVE-2025-37817

mcb: fix a double free bug in chameleon_parse_gdd() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcb_device_register() fails.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before d70184958b0ea8c0fd52e2b456654b503e769fc8; affected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before 4ffe8c9fb561e4427dd1a3056cd5b3685b74f78d; affected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before 59f993cd36b6e28a394ba3d977e8ffe5c9884e3b; affected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before c5b8a549ef1fcc6066b037a3962c79d60465ba0b; affected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before 96838eb1836fd372e42be5db84f0b333b65146a6; affected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before df1a5d5c6134224f9298e5189230f9d29ae50cac; affected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before bcc7d58ee5173e34306026bd01e1fbf75e169d37; affected 3764e82e5150d87b205c10cd78a9c9ab86fbfa51 before 7c7f1bfdb2249f854a736d9b79778c7e5a29a150
Linux / Linuxaffected 3.15; unaffected 0 before 3.15; unaffected 5.4.293 through 5.4.*; unaffected 5.10.237 through 5.10.*; unaffected 5.15.181 through 5.15.*; unaffected 6.1.136 through 6.1.*; unaffected 6.6.89 through 6.6.*; unaffected 6.12.26 through 6.12.*; unaffected 6.14.5 through 6.14.*; unaffected 6.15 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.