In the Linux kernel, the following vulnerability has been resolved:

mm/slab: make __free(kfree) accept error pointers

Currently, if an automatically freed allocation is an error pointer that
will lead to a crash. An example of this is in wm831x_gpio_dbg_show().

171 char *label __free(kfree) = gpiochip_dup_line_label(chip, i);
172 if (IS_ERR(label)) {
173 dev_err(wm831x->dev, "Failed to duplicate label\n");
174 continue;
175 }

The auto clean up function should check for error pointers as well,
otherwise we're going to keep hitting issues like this.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00012.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
af53aaf20722d745a69a051114a1ae237f5b922e affected < edca32f87329d6e341d2143a3b58ec254e8f6b88
f550466949e822afcd0b546a4fc35795930660bc affected < 946771c2a2b1150f9b7286feadc3aa1e15a1eb16
3c6cc62ce1265aa5623e2e1b29c0fe258bf6e232 affected < 9f6eb0ab4f95240589ee85fd9886a944cd3645b2
54da6a0924311c7cf5015533991e44fb8eb12773 affected < ac6cf3ce9b7d12acb7b528248df5f87caa25fcdc
54da6a0924311c7cf5015533991e44fb8eb12773 affected < 79cbe0be6c0317b215ddd8bd3e32f0afdac48543
54da6a0924311c7cf5015533991e44fb8eb12773 affected < cd7eb8f83fcf258f71e293f7fc52a70be8ed0128
Linux Linux affected
Version Status Constraints
6.5 affected —
0 unaffected < 6.5
6.1.91 unaffected ≤ 6.1.*
6.6.31 unaffected ≤ 6.6.*
6.8.10 unaffected ≤ 6.8.*
6.9 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-6949-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6949-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6952-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6955-1 Linux kernel (OEM) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/79cbe0be6c0317b215ddd8bd3e32f0afdac48543 cve-icon cve-icon
https://git.kernel.org/stable/c/946771c2a2b1150f9b7286feadc3aa1e15a1eb16 cve-icon cve-icon
https://git.kernel.org/stable/c/9f6eb0ab4f95240589ee85fd9886a944cd3645b2 cve-icon cve-icon
https://git.kernel.org/stable/c/ac6cf3ce9b7d12acb7b528248df5f87caa25fcdc cve-icon cve-icon
https://git.kernel.org/stable/c/cd7eb8f83fcf258f71e293f7fc52a70be8ed0128 cve-icon cve-icon
https://git.kernel.org/stable/c/edca32f87329d6e341d2143a3b58ec254e8f6b88 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024053033-CVE-2024-36890-b999@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-36890 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-36890 cve-icon
History

Wed, 29 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
References

Sun, 19 Oct 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 19 Oct 2025 15:00:00 +0000

Type Values Removed Values Added
References

Thu, 18 Sep 2025 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-763
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-29T13:18:54.362Z

Reserved: 2024-05-30T15:25:07.065Z

Link: CVE-2024-36890

cve-icon Vulnrichment

Updated: 2024-08-02T03:43:49.148Z

cve-icon NVD

Status : Modified

Published: 2024-05-30T16:15:12.493

Modified: 2025-10-29T14:15:50.067

Link: CVE-2024-36890

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-30T00:00:00Z

Links: CVE-2024-36890 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-07-13T11:14:43Z

Weaknesses