GHSA-84x6-2366-7jjm

GHSA-84x6-2366-7jjm PUBLISHED CVSS 7.800000190734863 HIGH

Record from GitHub Advisory Database · Published June 21, 2024

In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stm_register_device() The put_device(&stm->dev) call will trigger stm_device_release() which frees "stm" so the vfree(stm) on the next line is a double free.

Risk scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Timeline

Jun 21, 2024 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-84x6-2366-7jjm
vulnetix vdb fixes GHSA-84x6-2366-7jjm

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-84x6-2366-7jjm/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2024-38627 advisory
https://git.kernel.org/stable/c/370c480410f60b90ba3e96abe73ead21ec827b20 url
https://git.kernel.org/stable/c/3df463865ba42b8f88a590326f4c9ea17a1ce459 url
https://git.kernel.org/stable/c/4bfd48bb6e62512b9c392c5002c11e1e3b18d247 url
https://git.kernel.org/stable/c/7419df1acffbcc90037f6b5a2823e81389659b36 url
https://git.kernel.org/stable/c/6cc30ef8eb6d8f8d6df43152264bbf8835d99931 url
https://git.kernel.org/stable/c/713fc00c571dde4af3db2dbd5d1b0eadc327817b url
https://git.kernel.org/stable/c/a0450d3f38e7c6c0a7c0afd4182976ee15573695 url
https://git.kernel.org/stable/c/d782a2db8f7ac49c33b9ca3e835500a28667d1be url
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html url

Look up in the Resolve Platform →