In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: fix a memory leak when rechecking the data
Memory for the "checksums" pointer will leak if the data is rechecked
after checksum failure (because the associated kfree won't happen due
to 'goto skip_io').
Fix this by freeing the checksums memory before recheck, and just use
the "checksum_onstack" memory for storing checksum during recheck.
References
Configurations
Configuration 1 (hide)
|
History
07 Jan 2025, 17:13
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-401 | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | () https://git.kernel.org/stable/c/20e21c3c0195d915f33bc7321ee6b362177bf5bf - Patch | |
| References | () https://git.kernel.org/stable/c/74abc2fe09691f3d836d8a54d599ca71f1e4287b - Patch | |
| References | () https://git.kernel.org/stable/c/6d35654f03c35c273240d85ec67e3f2c3596c4e0 - Patch | |
| References | () https://git.kernel.org/stable/c/338580a7fb9b0930bb38098007e89cc0fc496bf7 - Patch | |
| References | () https://git.kernel.org/stable/c/55e565c42dce81a4e49c13262d5bc4eb4c2e588a - Patch | |
| First Time |
Linux linux Kernel
Linux |
17 Apr 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-17 11:15
Updated : 2025-01-07 17:13
NVD link : CVE-2024-26860
Mitre link : CVE-2024-26860
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-401
Missing Release of Memory after Effective Lifetime