In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
Clang static checker(scan-build) throws below warning： | drivers/firmware/arm_scmi/driver.c:line 2915, column 2 | Attempt to free released memory.
When devm_add_action_or_reset() fails, scmi_debugfs_common_cleanup() will run twice which causes double free of 'dbg->name'.
Remove the redundant scmi_debugfs_common_cleanup() to fix this problem.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04b | Feb 20, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub