In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allo…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees. BUG: KASAN: double-free or invalid-free in selinux_tun_dev_fre…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0c0e566f0387490d16f166808c72e9c772027681 Patch
- https://git.kernel.org/stable/c/158b515f703e75e7d68289bf4d98c664e1d632df Patch
- https://git.kernel.org/stable/c/3cb5ae77799e8ed6ec3fec0b6b4cd07f01650cc5 Patch
- https://git.kernel.org/stable/c/8eb43d635950e27c29f1e9e49a23b31637f37757 Patch
- https://git.kernel.org/stable/c/a01a4e9f5dc93335c716fa4023b1901956e8c904 Patch
- https://git.kernel.org/stable/c/0c0e566f0387490d16f166808c72e9c772027681 Patch
- https://git.kernel.org/stable/c/158b515f703e75e7d68289bf4d98c664e1d632df Patch
- https://git.kernel.org/stable/c/3cb5ae77799e8ed6ec3fec0b6b4cd07f01650cc5 Patch
- https://git.kernel.org/stable/c/8eb43d635950e27c29f1e9e49a23b31637f37757 Patch
- https://git.kernel.org/stable/c/a01a4e9f5dc93335c716fa4023b1901956e8c904 Patch
Timeline
- nvd_ingest NVD