Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtd_otp_nvmem_add() unregisters the user device but leaves mtd->otp_user_nvmem set. On an error, the caller unregisters it again. For -EOPNOTSUPP, registration continues and normal teardown unregisters it again. Clear mtd->otp_user_nvmem after unregistering it.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected e0489f6e221f5ddee6cb3bd51b992b790c5fa4b9 before cecf007418b93a2cbc94269e07fe2fb28f54d8fb; affected e0489f6e221f5ddee6cb3bd51b992b790c5fa4b9 before 26300879cd8e4612dce66bb8f6ff7cd35fcf3e59; affected 6d1af517817a760d7af3dee0fc4603645485495c; affected f1b4affca1e13706ca2eb075bf6775421236d7d1; affected 949476b8601bde5459048eebdf457c9db20addd8; affected dd6c85f98ff33b009b819090268cbf679dc208b9; affected 5.15.111 before 5.16; affected 6.1.28 before 6.2; affected 6.2.15 before 6.3; affected 6.3.2 before 6.4 |
| Linux / Linux | affected 6.4; unaffected 0 before 6.4; unaffected 7.2.10 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.