drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | 5.10.20 (including) | 5.10.103 (excluding) |
| Linux_kernel | Linux | 5.11.3 (including) | 5.15.26 (excluding) |
| Linux_kernel | Linux | 5.16 (including) | 5.16.12 (excluding) |