Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-39489

ipv6: sr: fix memleak in seg6_hmac_init_algo

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.93, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in afd5730969aec960a2fee4e5ee839a6014643976; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in 4a3fcf53725b70010d1cf869a2ba549fed6b8fb3; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in daf341e0a2318b813427d5a78788c86f4a7f02be; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in 61d31ac85b4572d11f8071855c0ccb4f32d76c0c; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in 599a5654215092ac22bfc453f4fd3959c55ea821; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in 0e44d6cbe8de983470c3d2f978649783384fdcb6; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in f6a99ef4e056c20a138a95cc51332b2b96c8f383; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in efb9f4f19f8e37fde43dfecebc80292d179f56c6

  • Linux Linux

    4.10

  • KernelLinux

    From 4.10.0 · fixed in 4.19.316; From 4.20.0 · fixed in 5.4.278; From 5.5.0 · fixed in 5.10.219; From 5.11.0 · fixed in 5.15.161; From 5.16.0 · fixed in 6.1.93; From 6.2.0 · fixed in 6.6.33; From 6.7.0 · fixed in 6.9.4

References 8

git.kernel.org