In the Linux kernel, the following vulnerability has been resolved:
stm class: Fix a double free in stmregisterdevice()
The putdevice(&stm->dev) call will trigger stmdevice_release() which frees "stm" so the vfree(stm) on the next line is a double free.
[
{
"deprecated": false,
"id": "CVE-2024-38627-11f06d63",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3df463865ba42b8f88a590326f4c9ea17a1ce459",
"signature_type": "Line"
},
{
"deprecated": false,
"id": "CVE-2024-38627-304bc4cc",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d782a2db8f7ac49c33b9ca3e835500a28667d1be",
"signature_type": "Line"
},
{
"deprecated": false,
"id": "CVE-2024-38627-48833ff4",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bfd48bb6e62512b9c392c5002c11e1e3b18d247",
"signature_type": "Line"
},
{
"deprecated": false,
"id": "CVE-2024-38627-52a00cd9",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0450d3f38e7c6c0a7c0afd4182976ee15573695",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-675cbbc6",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@713fc00c571dde4af3db2dbd5d1b0eadc327817b",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-69487167",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6cc30ef8eb6d8f8d6df43152264bbf8835d99931",
"signature_type": "Line"
},
{
"deprecated": false,
"id": "CVE-2024-38627-7118cb09",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7419df1acffbcc90037f6b5a2823e81389659b36",
"signature_type": "Line"
},
{
"deprecated": false,
"id": "CVE-2024-38627-71be6275",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@713fc00c571dde4af3db2dbd5d1b0eadc327817b",
"signature_type": "Line"
},
{
"deprecated": false,
"id": "CVE-2024-38627-7845c552",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6cc30ef8eb6d8f8d6df43152264bbf8835d99931",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-9310695d",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d782a2db8f7ac49c33b9ca3e835500a28667d1be",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-a39635f4",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7419df1acffbcc90037f6b5a2823e81389659b36",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-a4432fc4",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bfd48bb6e62512b9c392c5002c11e1e3b18d247",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-aa825e30",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0450d3f38e7c6c0a7c0afd4182976ee15573695",
"signature_type": "Line"
},
{
"deprecated": false,
"id": "CVE-2024-38627-b31f6b5d",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3df463865ba42b8f88a590326f4c9ea17a1ce459",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-d9446956",
"signature_version": "v1",
"target": {
"function": "stm_register_device",
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"length": 1381.0,
"function_hash": "239885991073677955695024603145057505739"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@370c480410f60b90ba3e96abe73ead21ec827b20",
"signature_type": "Function"
},
{
"deprecated": false,
"id": "CVE-2024-38627-dfdc7362",
"signature_version": "v1",
"target": {
"file": "drivers/hwtracing/stm/core.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"161208182643882645784387894203292430290",
"78313173414445644503852417131099347789",
"326107579259549228622650569323067756911",
"136853623012566404210671149761045432630",
"20262454735414347565137754665569105047",
"276306604835076489427003761492864312599",
"98546379194542319511760694639764607558",
"294278736549222479477611580526238806489",
"185965462953138083172051292393561745114",
"244065112181439681947054776107653659559",
"118108417715851049353951274447000037788"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@370c480410f60b90ba3e96abe73ead21ec827b20",
"signature_type": "Line"
}
]