CVE-2024-57980

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue in the Linux kernel's uvcvideo module has been identified. The problem occurs when the uvc status init() function fails to allocate the int urb, resulting in the dev->status pointer being freed but not reset to NULL. This leads to a double-free attempt when uvc status cleanup() is called. The issue is resolved by resetting the dev->status pointer to NULL after it is freed.

Recommendations For the affected Linux kernel version, apply the fix that resets the dev->status pointer to NULL after freeing it to prevent the double-free issue.