CVE-2024-46673

A flaw was found in the Linux kernel. Specifically, a double-free vulnerability exists in the aacraid SCSI driver. This occurs during probe failure when the aac_init_adapter() function frees memory for aac_dev::queues but fails to clear the pointer, leading aac_probe_one() to attempt a second free of the same memory. A local attacker could exploit this memory corruption to cause a denial of service (DoS) or potentially achieve arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.