Debian: CVE-2024-36973: linux, linux-6.1 -- security update

Debian: CVE-2024-36973: linux, linux-6.1 -- security update

Severity

7

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

06/17/2024

Created

07/19/2024

Added

07/18/2024

Modified

01/30/2025

Description

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), callback function gp_auxiliary_device_release() calls ida_free() and kfree(aux_device_wrapper) to free memory. We should't call them again in the error handling path. Fix this by skipping the redundant cleanup functions.

Solution(s)

• debian-upgrade-linux
• debian-upgrade-linux-6-1

References

• https://attackerkb.com/topics/cve-2024-36973
• CVE - 2024-36973
• DSA-5731-1