Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-26652 Details

Description

In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release calls kfree(padev) to free memory. We shouldn't call kfree(padev) again in the error handling path. Fix this by cleaning up the redundant kfree() and putting the error handling back to where the errors happened.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:4.1 MEDIUMVector:CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/995f802abff209514ac2ee03b96224237646cec3 kernel.orgPatch
https://git.kernel.org/stable/c/ba18deddd6d502da71fd6b6143c53042271b82bd kernel.orgPatch
https://git.kernel.org/stable/c/ffda0e962f270b3ec937660afd15b685263232d3 kernel.orgPatch
https://git.kernel.org/stable/c/995f802abff209514ac2ee03b96224237646cec3 CVEPatch
https://git.kernel.org/stable/c/ba18deddd6d502da71fd6b6143c53042271b82bd CVEPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-415Double Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 6.4, < 6.6.22
>= 6.7, < 6.7.10
6.8 rc1
6.8 rc2
6.8 rc3

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-26652
NVD Published Date:
Mar 27, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-26652 Details - Not Deferred