Security Advisory

CVE-2024-56766

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-06 16:20:44
Last updated 2026-05-23 15:56:02
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Calling kfree(user) will lead to a double free.