CVE-2024-36030

high

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvu_npc_freemem() Clang static checker(scan-build) warning: drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c:line 2184, column 2 Attempt to free released memory. npc_mcam_rsrcs_deinit() has released 'mcam->counters.bmap'. Deleted this redundant kfree() to fix this double free problem.

References

https://git.kernel.org/stable/c/f5aa87a2c0a72132ffc793fb0a5375b2a65d520a

https://git.kernel.org/stable/c/6e965eba43e9724f3e603d7b7cc83e53b23d155e

Details

Source: Mitre, NVD

Published: 2024-05-30

Updated: 2024-06-04

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High