CVE-2024-46741

Published Sep 18, 2024

Last updated 2 months ago

CVSS high 7.8

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf' In fastrpc_req_mmap() error path, the fastrpc buffer is freed in fastrpc_req_munmap_impl() if unmap is successful. But in the end, there is an unconditional call to fastrpc_buf_free(). So the above case triggers the double free of fastrpc buf.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-415

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E4529134-BAC4-4776-840B-304009E181A0",
            "versionEndExcluding": "6.6.51",
            "versionStartIncluding": "6.2"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ACDEE48C-137A-4731-90D0-A675865E1BED",
            "versionEndExcluding": "6.10.10",
            "versionStartIncluding": "6.7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8B3CE743-2126-47A3-8B7C-822B502CF119"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4DEB27E7-30AA-45CC-8934-B89263EF3551"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E0005AEF-856E-47EB-BFE4-90C46899394D"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "39889A68-6D34-47A6-82FC-CD0BF23D6754"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B8383ABF-1457-401F-9B61-EE50F4C61F4F"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.11:rc6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B77A9280-37E6-49AD-B559-5B23A3B1DC3D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References