Skip to content

Potential double free in function scap_open

Low
LucaGuerra published GHSA-c957-pmc3-99qj Feb 20, 2023

Package

falcosecurity/libs

Affected versions

< 0.10.4

Patched versions

0.10.4

Description

Impact

In libscap scap.c file, from the scap_open function, when calling scap_open_udig_int, a double free may occur because the function that calls scap_close(handle) will free the handle, and on the next line, the handle is freed again with free(handle). Removing the affected line solves the issue.

free(handle);

Patches

Upgrade to libs 0.10.4

Workarounds

No

References

Falco Security Audit report, 23-01-1097-LIV by Victor Houal, Laurent Laubin and Mahé Tardy

Severity

Low

CVE ID

No known CVE

Weaknesses