CVE-2025-37817

mcb: fix a double free bug in chameleon_parse_gdd()

HIGH

7.8

CVSS Score

Published: May 8, 2025 at 06:26 AM UTC

Updated: June 17, 2026 at 09:15 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcb_device_register() fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

3.15 ≤ v < 5.10.2373.15 ≤ v < 5.15.1813.15 ≤ v < 5.4.2933.15 ≤ v < 6.1.1363.15 ≤ v < 6.12.263.15 ≤ v < 6.14.53.15 ≤ v < 6.153.15 ≤ v < 6.6.895.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.1365.5 ≤ v < 5.10.2376.13 ≤ v < 6.14.56.2 ≤ v < 6.6.896.7 ≤ v < 6.12.263.153764e82e5150d87b205c10cd78a9c9ab86fbfa516.15 rc1 6.15 rc2 6.15 rc3

Vendor states this is fixed in 4ffe8c9fb561e4427dd1a3056cd5b3685b74f78d (fixed)

Vendor states this is fixed in 59f993cd36b6e28a394ba3d977e8ffe5c9884e3b (fixed)

Vendor states this is fixed in 7c7f1bfdb2249f854a736d9b79778c7e5a29a150 (fixed)

Vendor states this is fixed in 96838eb1836fd372e42be5db84f0b333b65146a6 (fixed)

Vendor states this is fixed in bcc7d58ee5173e34306026bd01e1fbf75e169d37 (fixed)

Vendor states this is fixed in c5b8a549ef1fcc6066b037a3962c79d60465ba0b (fixed)

Vendor states this is fixed in d70184958b0ea8c0fd52e2b456654b503e769fc8 (fixed)

Vendor states this is fixed in df1a5d5c6134224f9298e5189230f9d29ae50cac (fixed)

Vendor states this is fixed in 3.15 (unaffected)

Vendor states this is fixed in 5.10.237 (unaffected)

Vendor states this is fixed in 5.15.181 (unaffected)

Vendor states this is fixed in 5.4.293 (unaffected)