CVE-2025-37817

CVE-2025-37817: vulnerability in Linux

mcb: fix a double free bug in chameleon_parse_gdd()

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcb_device_register() fails.
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/4ffe8c9fb561e4427dd1a3056cd5b3685b74f78dhttps://git.kernel.org/stable/c/59f993cd36b6e28a394ba3d977e8ffe5c9884e3bhttps://git.kernel.org/stable/c/7c7f1bfdb2249f854a736d9b79778c7e5a29a150https://git.kernel.org/stable/c/96838eb1836fd372e42be5db84f0b333b65146a6https://git.kernel.org/stable/c/bcc7d58ee5173e34306026bd01e1fbf75e169d37https://git.kernel.org/stable/c/c5b8a549ef1fcc6066b037a3962c79d60465ba0bhttps://git.kernel.org/stable/c/d70184958b0ea8c0fd52e2b456654b503e769fc8https://git.kernel.org/stable/c/df1a5d5c6134224f9298e5189230f9d29ae50cachttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.htmlhttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html