CVE-2024-56766 (GCVE-0-2024-56766)
Vulnerability from cvelistv5
Published
2025-01-06 16:20
Modified
2025-05-04 13:01
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Calling kfree(user) will lead to a double free.
Impacted products
Vendor Product Version
Linux Linux Version: 22fbbc37edb840fd420fadf670366be9bf028426
Version: 54cb5fa850f9306d84e49a3db44b7a7eb5536cd1
Version: 5fe7709251e334cc27618473299c48340cecd3c8
Version: 24cbc37e837fd9e31e5024480b779207d1d99f1d
Version: f1290871c8aaeb13029390a2b6e5c05733a1be6f
Version: 8ac19ec818c548c5788da5926dcc8af96fad4bb1
Version: 6d734f1bfc336aaea91313a5632f2f197608fadd
Version: 2014fcea19ec27df033359a0f42db0e8ed4290a8
Version: bdd11a04d102f8310812aa7cec39545fdd6662d1
Create a notification for this product.
   Linux Linux Version: 5.4.287   
Version: 5.10.231   
Version: 5.15.174   
Version: 6.1.120   
Version: 6.6.64   
Version: 6.12.2   
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/mtd/nand/raw/atmel/pmecc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ca9818554b0f33e87f38e4bfa2dac056692d46cc",
              "status": "affected",
              "version": "22fbbc37edb840fd420fadf670366be9bf028426",
              "versionType": "git"
            },
            {
              "lessThan": "1562871ef613fa9492aa0310933eff785166a90e",
              "status": "affected",
              "version": "54cb5fa850f9306d84e49a3db44b7a7eb5536cd1",
              "versionType": "git"
            },
            {
              "lessThan": "3d825a241e65f7e3072978729e79d735ec40b80e",
              "status": "affected",
              "version": "5fe7709251e334cc27618473299c48340cecd3c8",
              "versionType": "git"
            },
            {
              "lessThan": "6ea15205d7e2b811fbbdf79783f686f58abfb4b7",
              "status": "affected",
              "version": "24cbc37e837fd9e31e5024480b779207d1d99f1d",
              "versionType": "git"
            },
            {
              "lessThan": "dd45c87782738715d5e7c167f8dabf0814a7394a",
              "status": "affected",
              "version": "f1290871c8aaeb13029390a2b6e5c05733a1be6f",
              "versionType": "git"
            },
            {
              "lessThan": "d2f090ea57f8d6587e09d4066f740a8617767b3d",
              "status": "affected",
              "version": "8ac19ec818c548c5788da5926dcc8af96fad4bb1",
              "versionType": "git"
            },
            {
              "lessThan": "d8e4771f99c0400a1873235704b28bb803c83d17",
              "status": "affected",
              "version": "6d734f1bfc336aaea91313a5632f2f197608fadd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "2014fcea19ec27df033359a0f42db0e8ed4290a8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "bdd11a04d102f8310812aa7cec39545fdd6662d1",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/mtd/nand/raw/atmel/pmecc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5.4.289",
              "status": "affected",
              "version": "5.4.287",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.233",
              "status": "affected",
              "version": "5.10.231",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.176",
              "status": "affected",
              "version": "5.15.174",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.123",
              "status": "affected",
              "version": "6.1.120",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.69",
              "status": "affected",
              "version": "6.6.64",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.8",
              "status": "affected",
              "version": "6.12.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.289",
                  "versionStartIncluding": "5.4.287",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.233",
                  "versionStartIncluding": "5.10.231",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.176",
                  "versionStartIncluding": "5.15.174",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.123",
                  "versionStartIncluding": "6.1.120",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.69",
                  "versionStartIncluding": "6.6.64",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.8",
                  "versionStartIncluding": "6.12.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.325",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.11.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc().  Calling kfree(user) will lead to a\ndouble free."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T13:01:21.700Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ca9818554b0f33e87f38e4bfa2dac056692d46cc"
        },
        {
          "url": "https://git.kernel.org/stable/c/1562871ef613fa9492aa0310933eff785166a90e"
        },
        {
          "url": "https://git.kernel.org/stable/c/3d825a241e65f7e3072978729e79d735ec40b80e"
        },
        {
          "url": "https://git.kernel.org/stable/c/6ea15205d7e2b811fbbdf79783f686f58abfb4b7"
        },
        {
          "url": "https://git.kernel.org/stable/c/dd45c87782738715d5e7c167f8dabf0814a7394a"
        },
        {
          "url": "https://git.kernel.org/stable/c/d2f090ea57f8d6587e09d4066f740a8617767b3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/d8e4771f99c0400a1873235704b28bb803c83d17"
        }
      ],
      "title": "mtd: rawnand: fix double free in atmel_pmecc_create_user()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-56766",
    "datePublished": "2025-01-06T16:20:44.676Z",
    "dateReserved": "2024-12-29T11:26:39.762Z",
    "dateUpdated": "2025-05-04T13:01:21.700Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-56766\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-01-06T17:15:43.127\",\"lastModified\":\"2025-01-09T16:16:23.913\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\\n\\nThe \\\"user\\\" pointer was converted from being allocated with kzalloc() to\\nbeing allocated by devm_kzalloc().  Calling kfree(user) will lead to a\\ndouble free.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: rawnand: se corrige una liberaci\u00f3n doble en atmel_pmecc_create_user(). El puntero \\\"usuario\\\" pas\u00f3 de estar asignado con kzalloc() a estar asignado por devm_kzalloc(). Llamar a kfree(user) provocar\u00e1 una liberaci\u00f3n doble.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.325\",\"versionEndExcluding\":\"4.20\",\"matchCriteriaId\":\"3C960EB7-4E90-49E0-BB92-BE6F1B8CF26F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4.287\",\"versionEndExcluding\":\"5.5\",\"matchCriteriaId\":\"2E049AFB-F729-4E03-87D4-2BB4FFA5E622\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.231\",\"versionEndExcluding\":\"5.11\",\"matchCriteriaId\":\"055DF185-747E-444A-AEC9-E23AA67777A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.174\",\"versionEndExcluding\":\"5.16\",\"matchCriteriaId\":\"5EDFC1D5-0414-42C6-B6E2-1101700AA7DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.120\",\"versionEndExcluding\":\"6.1.123\",\"matchCriteriaId\":\"010819A3-7BB5-4ACE-9F5E-C53664C957C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.64\",\"versionEndExcluding\":\"6.6.69\",\"matchCriteriaId\":\"1DA730E9-7DB9-4919-A111-9038A4685B92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.11.11\",\"versionEndExcluding\":\"6.12\",\"matchCriteriaId\":\"4CBF5F6E-D446-4CAE-AAA4-413442319824\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12.2\",\"versionEndExcluding\":\"6.12.8\",\"matchCriteriaId\":\"42EECCF9-F7F0-46E2-A493-B31E541E6147\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"62567B3C-6CEE-46D0-BC2E-B3717FBF7D13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A073481-106D-4B15-B4C7-FB0213B8E1D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE491969-75AE-4A6B-9A58-8FC5AF98798F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"93C0660D-7FB8-4FBA-892A-B064BA71E49E\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1562871ef613fa9492aa0310933eff785166a90e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3d825a241e65f7e3072978729e79d735ec40b80e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6ea15205d7e2b811fbbdf79783f686f58abfb4b7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ca9818554b0f33e87f38e4bfa2dac056692d46cc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d2f090ea57f8d6587e09d4066f740a8617767b3d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d8e4771f99c0400a1873235704b28bb803c83d17\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dd45c87782738715d5e7c167f8dabf0814a7394a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…