CVE-2024-36940

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freeing it in pinctrl_enable() will lead to a double free. The devm_pinctrl_dev_release() function frees the pindescs and destroys the mutex as well.

Affected product and versions

Product

Linux Linux, RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family

Affected versions

>= 6118714275f0a313ecc296a87ed1af32d9691bed < 735f4c6b6771eafe336404c157ca683ad72a040d, >= 6118714275f0a313ecc296a87ed1af32d9691bed < cdaa171473d98962ae86f2a663d398fda2fbeefd, >= 6118714275f0a313ecc296a87ed1af32d9691bed < 288bc4aa75f150d6f1ee82dd43c6da1b438b6068, >= 6118714275f0a313ecc296a87ed1af32d9691bed < 41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca, >= 6118714275f0a313ecc296a87ed1af32d9691bed < ac7d65795827dc0cf7662384ed27caf4066bd72e, >= 6118714275f0a313ecc296a87ed1af32d9691bed < 558c8039fdf596a584a92c171cbf3298919c448c, >= 6118714275f0a313ecc296a87ed1af32d9691bed < f9f1e321d53e4c5b666b66e5b43da29841fb55ba, >= 6118714275f0a313ecc296a87ed1af32d9691bed < 5038a66dad0199de60e5671603ea6623eb9e5c79, >= 4.11, < V3.1, >= 4.11 < 4.19.314, >= 4.20 < 5.4.276, >= 5.5 < 5.10.217, >= 5.11 < 5.15.159, >= 5.16 < 6.1.91, >= 6.2 < 6.6.31, >= 6.7 < 6.8.10, 6.9, 10.0

Fixed versions

4.19.314, 5.4.276, 5.10.217, 5.15.159, 6.1.91, 6.6.31, 6.8.10

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-415