CVE Database
/

CVE-2025-37817

Back to search

CVE-2025-37817

Published: May 8, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcb_device_register() fails.

VendorProductVersions

Linux

Linux

affected
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 - < d70184958b0ea8c0fd52e2b456654b503e769fc8
affected
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 - < 4ffe8c9fb561e4427dd1a3056cd5b3685b74f78d
affected
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 - < 59f993cd36b6e28a394ba3d977e8ffe5c9884e3b
affected
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 - < c5b8a549ef1fcc6066b037a3962c79d60465ba0b
affected
3764e82e5150d87b205c10cd78a9c9ab86fbfa51 - < 96838eb1836fd372e42be5db84f0b333b65146a6

+3 more versions

Linux

Linux

affected
3.15
unaffected
0 - < 3.15
unaffected
5.4.293 - <= 5.4.*
unaffected
5.10.237 - <= 5.10.*
unaffected
5.15.181 - <= 5.15.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now