VYPR
High severity8.4NVD Advisory· Published Jun 17, 2024· Updated Aug 4, 2026

CVE-2024-36973

CVE-2024-36973

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()

When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), callback function gp_auxiliary_device_release() calls ida_free() and kfree(aux_device_wrapper) to free memory. We should't call them again in the error handling path.

Fix this by skipping the redundant cleanup functions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

54

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.