Threats tagged 'ghsa-pqqr-79q5-9qwg'

CVE-2024-36973 is a high-severity vulnerability in the Linux kernel's microchip pci1xxxx driver. It involves a double free error in the error handling path of the gp_aux_bus_probe() function. The issue arises when auxiliary_device_add() returns an error and auxiliary_device_uninit() triggers the gp_auxiliary_device_release() callback, which frees memory that is then freed again redundantly. This double free can lead to memory corruption and potentially allow an attacker to compromise system integrity or cause denial of service.