Linux Kernel Double Free Vulnerability in Power Management Parsing

Vulnerability

A double free vulnerability has been identified in the Linux kernel's power management component for AMD graphics. The issue arises in the function 'si_parse_power_table()', where an array is allocated to hold power state information. If the allocation of any array member fails, the array is freed and an error code is returned. However, the array is subsequently freed again in the 'si_dpm_fini()' function, leading to a potential double free scenario. This vulnerability also causes a memory leak, as the array members are not freed during the allocation process. Additionally, the power state count is not updated until all allocations are successfully completed, which could result in accessing uninitialized variables or a use-after-free condition.

Impact

Exploitation of this vulnerability can lead to a double free condition, causing memory corruption. This could be exploited to execute arbitrary code or cause a denial of service by crashing the system.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.