CVE-2024-43871

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-43871
In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3047f99caec240a88ccd06197af2868da1af6a96 Patch
https://git.kernel.org/stable/c/3dcd0673e47664bc6c719ad47dadac6d55d5950d Patch
https://git.kernel.org/stable/c/700e8abd65b10792b2f179ce4e858f2ca2880f85 Patch
https://git.kernel.org/stable/c/95065edb8ebb27771d5f1e898eef6ab43dc6c87c Patch
https://git.kernel.org/stable/c/b044588a16a978cd891cb3d665dd7ae06850d5bf Patch
https://git.kernel.org/stable/c/b67552d7c61f52f1271031adfa7834545ae99701 Patch
https://git.kernel.org/stable/c/bd50a974097bb82d52a458bd3ee39fb723129a0c Patch
https://git.kernel.org/stable/c/ef56dcdca8f2a53abc3a83d388b8336447533d85 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Sep 2024, 13:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3047f99caec240a88ccd06197af2868da1af6a96 - () https://git.kernel.org/stable/c/3047f99caec240a88ccd06197af2868da1af6a96 - Patch
References () https://git.kernel.org/stable/c/3dcd0673e47664bc6c719ad47dadac6d55d5950d - () https://git.kernel.org/stable/c/3dcd0673e47664bc6c719ad47dadac6d55d5950d - Patch
References () https://git.kernel.org/stable/c/700e8abd65b10792b2f179ce4e858f2ca2880f85 - () https://git.kernel.org/stable/c/700e8abd65b10792b2f179ce4e858f2ca2880f85 - Patch
References () https://git.kernel.org/stable/c/95065edb8ebb27771d5f1e898eef6ab43dc6c87c - () https://git.kernel.org/stable/c/95065edb8ebb27771d5f1e898eef6ab43dc6c87c - Patch
References () https://git.kernel.org/stable/c/b044588a16a978cd891cb3d665dd7ae06850d5bf - () https://git.kernel.org/stable/c/b044588a16a978cd891cb3d665dd7ae06850d5bf - Patch
References () https://git.kernel.org/stable/c/b67552d7c61f52f1271031adfa7834545ae99701 - () https://git.kernel.org/stable/c/b67552d7c61f52f1271031adfa7834545ae99701 - Patch
References () https://git.kernel.org/stable/c/bd50a974097bb82d52a458bd3ee39fb723129a0c - () https://git.kernel.org/stable/c/bd50a974097bb82d52a458bd3ee39fb723129a0c - Patch
References () https://git.kernel.org/stable/c/ef56dcdca8f2a53abc3a83d388b8336447533d85 - () https://git.kernel.org/stable/c/ef56dcdca8f2a53abc3a83d388b8336447533d85 - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: devres: corrige la pérdida de memoria causada por la API del controlador devm_free_percpu(). Causará una pérdida de memoria cuando se usa la API del controlador devm_free_percpu() para liberar la memoria asignada por devm_alloc_percpu(), solucionada usando devres_release( ) en lugar de devres_destroy() dentro de devm_free_percpu().

21 Aug 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-21 01:15

Updated : 2024-09-03 13:39

NVD link : CVE-2024-43871

Mitre link : CVE-2024-43871

CVE.ORG link : CVE-2024-43871

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime