2025-01-06 19:03:52 +00:00
{
"id" : "CVE-2024-56766" ,
"sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"published" : "2025-01-06T17:15:43.127" ,
2025-01-09 17:04:14 +00:00
"lastModified" : "2025-01-09T16:16:23.913" ,
"vulnStatus" : "Modified" ,
2025-01-06 19:03:52 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc(). Calling kfree(user) will lead to a\ndouble free."
2025-01-07 23:03:44 +00:00
} ,
{
"lang" : "es" ,
"value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: rawnand: se corrige una liberaci\u00f3n doble en atmel_pmecc_create_user(). El puntero \"usuario\" pas\u00f3 de estar asignado con kzalloc() a estar asignado por devm_kzalloc(). Llamar a kfree(user) provocar\u00e1 una liberaci\u00f3n doble."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-415"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.19.325" ,
"versionEndExcluding" : "4.20" ,
"matchCriteriaId" : "3C960EB7-4E90-49E0-BB92-BE6F1B8CF26F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.4.287" ,
"versionEndExcluding" : "5.5" ,
"matchCriteriaId" : "2E049AFB-F729-4E03-87D4-2BB4FFA5E622"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.10.231" ,
"versionEndExcluding" : "5.11" ,
"matchCriteriaId" : "055DF185-747E-444A-AEC9-E23AA67777A2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.15.174" ,
"versionEndExcluding" : "5.16" ,
"matchCriteriaId" : "5EDFC1D5-0414-42C6-B6E2-1101700AA7DE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.1.120" ,
"versionEndExcluding" : "6.1.123" ,
"matchCriteriaId" : "010819A3-7BB5-4ACE-9F5E-C53664C957C2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.6.64" ,
"versionEndExcluding" : "6.6.69" ,
"matchCriteriaId" : "1DA730E9-7DB9-4919-A111-9038A4685B92"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.11.11" ,
"versionEndExcluding" : "6.12" ,
"matchCriteriaId" : "4CBF5F6E-D446-4CAE-AAA4-413442319824"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.12.2" ,
"versionEndExcluding" : "6.12.8" ,
"matchCriteriaId" : "42EECCF9-F7F0-46E2-A493-B31E541E6147"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*" ,
"matchCriteriaId" : "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*" ,
"matchCriteriaId" : "5A073481-106D-4B15-B4C7-FB0213B8E1D4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE491969-75AE-4A6B-9A58-8FC5AF98798F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*" ,
"matchCriteriaId" : "93C0660D-7FB8-4FBA-892A-B064BA71E49E"
}
]
}
]
2025-01-06 19:03:52 +00:00
}
] ,
"references" : [
2025-01-09 17:04:14 +00:00
{
"url" : "https://git.kernel.org/stable/c/1562871ef613fa9492aa0310933eff785166a90e" ,
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
} ,
{
"url" : "https://git.kernel.org/stable/c/3d825a241e65f7e3072978729e79d735ec40b80e" ,
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
} ,
2025-01-06 19:03:52 +00:00
{
"url" : "https://git.kernel.org/stable/c/6ea15205d7e2b811fbbdf79783f686f58abfb4b7" ,
2025-01-07 23:03:44 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2025-01-06 19:03:52 +00:00
} ,
2025-01-09 17:04:14 +00:00
{
"url" : "https://git.kernel.org/stable/c/ca9818554b0f33e87f38e4bfa2dac056692d46cc" ,
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
} ,
2025-01-06 19:03:52 +00:00
{
"url" : "https://git.kernel.org/stable/c/d2f090ea57f8d6587e09d4066f740a8617767b3d" ,
2025-01-07 23:03:44 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2025-01-06 19:03:52 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/d8e4771f99c0400a1873235704b28bb803c83d17" ,
2025-01-07 23:03:44 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2025-01-06 19:03:52 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/dd45c87782738715d5e7c167f8dabf0814a7394a" ,
2025-01-07 23:03:44 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2025-01-06 19:03:52 +00:00
}
]
}
