Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
s390/ctcm: Fix double-kfree
The function ‘mpc_rcvd_sweep_req(mpcginfo)’ is called conditionally from function ‘ctcmpc_unpack_skb’. It frees passed mpcginfo. After that a call to function ‘kfree’ in function ‘ctcmpc_unpack_skb’ frees it again.
Remove ‘kfree’ call in function ‘mpc_rcvd_sweep_req(mpcginfo)’.
Bug detected by the clang static analyzer.
Details
- Affected product:
- Oracle Linux 7 ELS , Ubuntu 20.04 ELS
- Affected packages:
- kernel-uek @ 5.4.17 (+1 more)
In the Linux kernel, the following vulnerability has been resolved:
s390/ctcm: Fix double-kfree
The function ‘mpc_rcvd_sweep_req(mpcginfo)’ is called conditionally from function ‘ctcmpc_unpack_skb’. It frees passed mpcginfo. After that a call to function ‘kfree’ in function ‘ctcmpc_unpack_skb’ frees it again.
Remove ‘kfree’ call in function ‘mpc_rcvd_sweep_req(mpcginfo)’.
Bug detected by the clang static analyzer.