Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 6.17.0-rc3, < 6.17.0-rc3+
A vulnerability in the Linux kernel's PPS (Pulse Per Second) subsystem can lead to a warning being triggered when registering a device. This issue occurs because the release hook is not set before the device is registered. If the device registration fails, the system attempts to call the release function, which can result in a warning about a double free error. The vulnerability affects several versions of the Linux kernel, including 6.17.0-rc3.
The vulnerability can cause a warning to be issued about a double free error, which can lead to memory management issues.
The vulnerability can be reproduced by registering a PPS device without setting the release hook first. When the device registration fails, the system will attempt to call the release function, triggering a warning about a double free error. This can be done by creating a PPS source and registering it without properly handling the device release process.
The vulnerability has been addressed in the Linux kernel by modifying the PPS device registration process to include the release hook before the device is registered. Users can upgrade to the latest version of the Linux kernel to apply this fix.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.