CVE-2017-18174 In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free.
CriticalCVSS 9.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | < 4.7 | 4.7 |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3848-1 vendor-advisory
- USN-3848-2 vendor-advisory
- www.cve.org
- git.kernel.org patch third-party-advisory
- git.kernel.org patch third-party-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- USN-3848-1 vendor-advisory
- USN-3848-2 vendor-advisory
- Debian Security Tracker CVE-2017-18174 vendor-advisory