Wind River Support Network

HomeDefectsLIN1023-10013
Fixed

LIN1023-10013 : Security Advisory - linux - CVE-2024-56766

Created: Jan 6, 2025    Updated: Feb 19, 2025
Resolved Date: Feb 7, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.15
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: fix double free in atmel_pmecc_create_user()

The "user" pointer was converted from being allocated with kzalloc() to
being allocated by devm_kzalloc().  Calling kfree(user) will lead to a
double free.

CREATE(Triage):(User=admin) CVE-2024-56766 (https://nvd.nist.gov/vuln/detail/CVE-2024-56766)

CVEs


Live chat
Online