CVE-2025-37817

Publication date

2025-05-08 06:26:12

Family

Linux

State

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, mdev would be released in mcb_device_register() via put_device(). Thus, goto err label and free mdev again causes a double free. Just return if mcb_device_register() fails.