CVE-2024-42069

Advisory lineage Upstream: 0 Downstream: 24
Modified
Published: 29 Jul 2024, 15:52
Last modified:11 May 2026, 20:26

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.04% LOW
0% probability +0.02%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Jul 2024, 15:52
Published
Vulnerability first disclosed
11 May 2026, 20:26
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), callback function adev_release calls kfree(madev). We shouldn't call kfree(madev) again in the error handling path. Set 'madev' to NULL.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.04%• Percentile: 14%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ a69839d4327d053b18d8e1b0e7ddeee78db78f4f, < 3243e64eb4d897c3eeb48b2a7221ab5a95e1282a | ≥ a69839d4327d053b18d8e1b0e7ddeee78db78f4f, < ed45c0a0b662079d4c0e518014cc148c753979b4 | ≥ a69839d4327d053b18d8e1b0e7ddeee78db78f4f, < 1864b8224195d0e43ddb92a8151f54f6562090cc | 6.2

  • linux•linux_kernel

    < 6.2 | ≥ 6.3, < 6.6.37 | ≥ 6.7, < 6.9.8

References (4)