CVE-2024-26655

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26655
In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock. Re-organize the code slightly to make it all more obvious.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847 Patch
https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8 Patch
https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341 Patch
https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847 Patch
https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8 Patch
https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
History

07 Jan 2025, 17:19

Type Values Removed Values Added
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847 - () https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847 - Patch
References () https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8 - () https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8 - Patch
References () https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341 - () https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341 - Patch

21 Nov 2024, 09:02

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847 - () https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847 -
References () https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8 - () https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8 -
References () https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341 - () https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341 -

03 Apr 2024, 14:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Reparar la pérdida de memoria en posix_clock_open() Si la función clk ops.open() devuelve un error, no liberamos el contexto de pc que asignamos para este reloj. Reorganice ligeramente el código para que sea más obvio.
References
  • () https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847 -
  • () https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341 -

01 Apr 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-01 15:15

Updated : 2025-01-07 17:19

NVD link : CVE-2024-26655

Mitre link : CVE-2024-26655

CVE.ORG link : CVE-2024-26655

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime