Linux Kernel Double Free Vulnerability in Chameleon GDD Parsing

Vulnerability

A double free vulnerability has been identified in the Linux kernel within the Chameleon device driver. The issue arises in the function 'chameleon_parse_gdd()', where the device is released twice if 'mcb_device_register()' fails. This flaw creates a double free condition, which can lead to memory corruption.

Impact

Exploitation of this vulnerability can cause memory corruption due to the double free condition, potentially leading to arbitrary code execution or a denial-of-service scenario.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.