CVE-2024-56710

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and pages remain pinned if ceph_alloc_sparse_ext_map() fails. There is no need to delay the allocation of sparse_ext map until after the bvecs array is set up, so fix this by moving sparse_ext allocation a bit earlier. Also, make a similar adjustment in __ceph_sync_read() for consistency (a leak of the same kind in __ceph_sync_read() has been addressed differently).
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

06 Jan 2025, 17:13

Type Values Removed Values Added
CWE CWE-401
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/eb9041837123f31d5897e99bb761f46cb4ce5859 - () https://git.kernel.org/stable/c/eb9041837123f31d5897e99bb761f46cb4ce5859 - Patch
References () https://git.kernel.org/stable/c/66e0c4f91461d17d48071695271c824620bed4ef - () https://git.kernel.org/stable/c/66e0c4f91461d17d48071695271c824620bed4ef - Patch
References () https://git.kernel.org/stable/c/44e518abbb498075ae85c7d1d1a503a6bb05ea2d - () https://git.kernel.org/stable/c/44e518abbb498075ae85c7d1d1a503a6bb05ea2d - Patch

02 Jan 2025, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/44e518abbb498075ae85c7d1d1a503a6bb05ea2d -

29 Dec 2024, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-29 09:15

Updated : 2025-04-17 21:15


NVD link : CVE-2024-56710

Mitre link : CVE-2024-56710


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime