CVE-2024-56766

Summary

CVE-2024-56766: A vulnerability in the Linux kernel's mtd subsystem's rawnand driver has been addressed. The issue involved a double free vulnerability in the function atmel_pmecc_create_user(). The problem arose due to the pointer being allocated with devm_kzalloc() instead of kzalloc(). Consequently, calling kfree() on the "user" pointer resulted in a double free scenario.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.