CVE-2017-18174: Linux Kernel

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free.

Affected products

• Linux Linux Kernel: before 4.7 (fixed in 4.7)

Published 2018-02-11. Last modified 2026-06-17.