CVE-2024-36030

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-36030
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-36030.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-36030
Downstream
Related
Published
2024-05-30T15:19:43Z
Modified
2025-10-09T09:35:29.661136Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
octeontx2-af: fix the double free in rvu_npc_freemem()
Details

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: fix the double free in rvunpcfreemem()

Clang static checker(scan-build) warning: drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c:line 2184, column 2 Attempt to free released memory.

npcmcamrsrcs_deinit() has released 'mcam->counters.bmap'. Deleted this redundant kfree() to fix this double free problem.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd7842878633453e38d6a4927593dd28b9d8ab91
Fixed
f5aa87a2c0a72132ffc793fb0a5375b2a65d520a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd7842878633453e38d6a4927593dd28b9d8ab91
Fixed
6e965eba43e9724f3e603d7b7cc83e53b23d155e

Affected versions

v6.*

v6.7
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.2
v6.8.3
v6.8.4
v6.8.5
v6.8.6
v6.8.7
v6.8.8
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.9