In the Linux kernel, the following vulnerability has been resolved:
mcb: fix a double free bug in chameleonparsegdd()
In chameleonparsegdd(), if mcbdeviceregister() fails, 'mdev' would be released in mcbdeviceregister() via putdevice(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcbdevice_register() fails.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37817.json",
"cna_assigner": "Linux"
}