In the Linux kernel, the following vulnerability has been resolved:mtd: rawnand: fix double free in atmel_pmecc_create_user()The "user" pointer was converted from being allocated with kzalloc() tobeing allocated by devm_kzalloc(). Calling kfree(user) will lead to adouble free.
No PoCs from references.
- https://github.com/w4zu/Debian_security