Threats tagged 'ghsa-47v5-cr23-pw2c'

CVE-2024-42069 is a medium severity vulnerability in the Linux kernel's net: mana component. It involves a possible double free error in the error handling path when auxiliary_device_add() fails and calls auxiliary_device_uninit(). The callback function adev_release calls kfree(madev), and the code mistakenly calls kfree(madev) again, leading to a double free. This flaw has been fixed by setting 'madev' to NULL after the first free to prevent the second free call.