Cyber Resilience

CVE-2024-27433

Memory Safety in Linux Kernel 6.4 – 6.6.23

Published
17 May 2024
Modified
03 February 2025
Patch / advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0023 14th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2024-27433 is a high-severity Double Free (CWE-415) vulnerability in Linux Linux Kernel. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 14th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() 'clk_data' is allocated with mtk_devm_alloc_clk_data(). So calling mtk_free_clk_data() explicitly in the remove function would lead to a double-free. Remove the…

more

redundant call.

CWE(s)

Related Threats

CVEs Like This One

CVE-2024-39292Same product: Linux Linux Kernel
CVE-2025-38582Same product: Linux Linux Kernel
CVE-2025-71238Same product: Linux Linux Kernel
CVE-2026-45891Same product: Linux Linux Kernel
CVE-2026-43097Same product: Linux Linux Kernel
CVE-2024-26930Same product: Linux Linux Kernel
CVE-2024-57980Same product: Linux Linux Kernel
CVE-2023-52930Same product: Linux Linux Kernel
CVE-2024-50159Same product: Linux Linux Kernel
CVE-2024-46673Same product: Linux Linux Kernel

Affected Assets

linux
linux kernel
6.4 — 6.6.23 · 6.7 — 6.7.11 · 6.8 — 6.8.2

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)
  • 1 hardening rule · 1 OS baseline
Validate
Prove the fix (OWASP ASVS)

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 full match
prevents

Secure SDLC practices directly prevent double-free errors via static analysis, safe memory APIs, and testing.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development can detect double-free conditions before release.

prevents

Secure development life cycle includes memory-safety practices that can prevent double-free bugs.

prevents

Application security requirements can mandate memory-safety rules that reduce double-free risk.

prevents

Secure system architecture and engineering principles can prescribe safe memory-management patterns.

prevents

Secure coding standards directly address proper use of free() and similar functions.

References