Vulnerabilities > CVE-2024-56766 - Double Free vulnerability in Linux Kernel

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
linux
CWE-415
NVD
Published: 2025-01-06
Updated: 2025-01-09

Summary

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Calling kfree(user) will lead to a double free.

Vulnerable Configurations

Part Description Count
OS
Linux
10

Common Weakness Enumeration (CWE)

References