Wind River Support Network

HomeDefectsLIN1024-6227
Fixed

LIN1024-6227 : Security Advisory - linux - CVE-2024-56766

Created: Jan 6, 2025    Updated: Jan 9, 2025
Resolved Date: Jan 9, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.5
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: fix double free in atmel_pmecc_create_user()

The "user" pointer was converted from being allocated with kzalloc() to
being allocated by devm_kzalloc().  Calling kfree(user) will lead to a
double free.

CREATE(Triage):(User=admin) CVE-2024-56766 (https://nvd.nist.gov/vuln/detail/CVE-2024-56766)

CVEs


Live chat
Online