CVE-2024-36940

Updated: 2026-02-27 02:14:36.876395

Description:

In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freeing it in pinctrl_enable() will lead to a double free. The devm_pinctrl_dev_release() function frees the pindescs and destroys the mutex as well.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Not Vulnerable 2024-08-25 12:15:16
Ubuntu 18.04 ELS linux 4.15.0 7.8 HIGH Released CLSA-2024:1723806933 2024-08-16 12:16:25
Total: 12