NetSight
IP …
high7.8

CVE-2024-56708

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens becaus…

Impact

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Avoid segmentation fault on module unload The segmentation fault happens because: During modprobe: 1. In igen6_probe(), igen6_pvt will be allocated with kzalloc() 2. In igen6_register_mci(), mci->pvt_info will point to &igen6_pvt->imc[mc] During rmmod: 1. In mci_release() in edac_mc.c, it will kfree(mci->pvt_info) 2. In igen6_remove(), it will kfree(igen6_pvt); Fix this issue by setting mci->pvt_info to NULL to avoid the double kfree.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.11 before 5.15.174
from 5.16 before 6.1.120
from 6.2 before 6.6.64
from 6.7 before 6.11.11
from 6.12 before 6.12.2

Weakness classification

CWE-415

References