CVE-2024-56766
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 6, 2025
Updated: Jan 9, 2025
CWE ID 415
Summary
CVE-2024-56766 is a linux kernel vulnerability affecting the mtd (Memory Technology Device) subsystem's rawnand component. The issue stems from a double free vulnerability in the function atmel_pmecc_create_user(). Prior to its resolution, the "user" pointer was allocated using kzalloc(), but was later freed using kfree(). This sequence of actions results in a double free scenario, potentially leading to memory corruption and unintended system behavior.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX