In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: fix double free in atmelpmecccreate_user()
The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Calling kfree(user) will lead to a double free.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56766.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-56766.json"
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8e4771f99c0400a1873235704b28bb803c83d17",
"digest": {
"line_hashes": [
"329563446204101413043187275518637743990",
"77114229432586639803598207196658575821",
"112385843870424279256741434379131225686",
"66267156110862856046993035218422197542",
"291826685536607302412928982208190439094",
"262087772267965505515426326676716251169",
"299862295050629830405134543068790952164"
],
"threshold": 0.9
},
"id": "CVE-2024-56766-171d049a",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca9818554b0f33e87f38e4bfa2dac056692d46cc",
"digest": {
"line_hashes": [
"329563446204101413043187275518637743990",
"77114229432586639803598207196658575821",
"112385843870424279256741434379131225686",
"66267156110862856046993035218422197542",
"291826685536607302412928982208190439094",
"262087772267965505515426326676716251169",
"299862295050629830405134543068790952164"
],
"threshold": 0.9
},
"id": "CVE-2024-56766-41651cfc",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d825a241e65f7e3072978729e79d735ec40b80e",
"digest": {
"length": 1797.0,
"function_hash": "303826707292933488950153241754045708028"
},
"id": "CVE-2024-56766-5571ffae",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c",
"function": "atmel_pmecc_create_user"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1562871ef613fa9492aa0310933eff785166a90e",
"digest": {
"length": 1797.0,
"function_hash": "303826707292933488950153241754045708028"
},
"id": "CVE-2024-56766-9e5a2af5",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c",
"function": "atmel_pmecc_create_user"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca9818554b0f33e87f38e4bfa2dac056692d46cc",
"digest": {
"length": 1797.0,
"function_hash": "303826707292933488950153241754045708028"
},
"id": "CVE-2024-56766-bbb555c8",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c",
"function": "atmel_pmecc_create_user"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2f090ea57f8d6587e09d4066f740a8617767b3d",
"digest": {
"line_hashes": [
"329563446204101413043187275518637743990",
"77114229432586639803598207196658575821",
"112385843870424279256741434379131225686",
"66267156110862856046993035218422197542",
"291826685536607302412928982208190439094",
"262087772267965505515426326676716251169",
"299862295050629830405134543068790952164"
],
"threshold": 0.9
},
"id": "CVE-2024-56766-c0990d39",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2f090ea57f8d6587e09d4066f740a8617767b3d",
"digest": {
"length": 1797.0,
"function_hash": "303826707292933488950153241754045708028"
},
"id": "CVE-2024-56766-c53c242e",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c",
"function": "atmel_pmecc_create_user"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ea15205d7e2b811fbbdf79783f686f58abfb4b7",
"digest": {
"line_hashes": [
"329563446204101413043187275518637743990",
"77114229432586639803598207196658575821",
"112385843870424279256741434379131225686",
"66267156110862856046993035218422197542",
"291826685536607302412928982208190439094",
"262087772267965505515426326676716251169",
"299862295050629830405134543068790952164"
],
"threshold": 0.9
},
"id": "CVE-2024-56766-c71a3f5c",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ea15205d7e2b811fbbdf79783f686f58abfb4b7",
"digest": {
"length": 1797.0,
"function_hash": "303826707292933488950153241754045708028"
},
"id": "CVE-2024-56766-c8851e57",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c",
"function": "atmel_pmecc_create_user"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d825a241e65f7e3072978729e79d735ec40b80e",
"digest": {
"line_hashes": [
"329563446204101413043187275518637743990",
"77114229432586639803598207196658575821",
"112385843870424279256741434379131225686",
"66267156110862856046993035218422197542",
"291826685536607302412928982208190439094",
"262087772267965505515426326676716251169",
"299862295050629830405134543068790952164"
],
"threshold": 0.9
},
"id": "CVE-2024-56766-cbdefe8b",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8e4771f99c0400a1873235704b28bb803c83d17",
"digest": {
"length": 1797.0,
"function_hash": "303826707292933488950153241754045708028"
},
"id": "CVE-2024-56766-d9477dc0",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c",
"function": "atmel_pmecc_create_user"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1562871ef613fa9492aa0310933eff785166a90e",
"digest": {
"line_hashes": [
"329563446204101413043187275518637743990",
"77114229432586639803598207196658575821",
"112385843870424279256741434379131225686",
"66267156110862856046993035218422197542",
"291826685536607302412928982208190439094",
"262087772267965505515426326676716251169",
"299862295050629830405134543068790952164"
],
"threshold": 0.9
},
"id": "CVE-2024-56766-daca76d2",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd45c87782738715d5e7c167f8dabf0814a7394a",
"digest": {
"line_hashes": [
"329563446204101413043187275518637743990",
"77114229432586639803598207196658575821",
"112385843870424279256741434379131225686",
"66267156110862856046993035218422197542",
"291826685536607302412928982208190439094",
"262087772267965505515426326676716251169",
"299862295050629830405134543068790952164"
],
"threshold": 0.9
},
"id": "CVE-2024-56766-f1d5e42b",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd45c87782738715d5e7c167f8dabf0814a7394a",
"digest": {
"length": 1797.0,
"function_hash": "303826707292933488950153241754045708028"
},
"id": "CVE-2024-56766-f2471e3a",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "drivers/mtd/nand/raw/atmel/pmecc.c",
"function": "atmel_pmecc_create_user"
}
}
]