Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-43871

devres: Fix memory leakage caused by driver API devm_free_percpu()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.320, 5.4.282, 5.10.224, 5.15.165, 6.1.103, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in 700e8abd65b10792b2f179ce4e858f2ca2880f85; From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in b044588a16a978cd891cb3d665dd7ae06850d5bf; From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in ef56dcdca8f2a53abc3a83d388b8336447533d85; From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in 3047f99caec240a88ccd06197af2868da1af6a96; From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in 3dcd0673e47664bc6c719ad47dadac6d55d5950d; From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in b67552d7c61f52f1271031adfa7834545ae99701; From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in 95065edb8ebb27771d5f1e898eef6ab43dc6c87c; From ff86aae3b4112b85d2231c23bccbc49589df1c06 · fixed in bd50a974097bb82d52a458bd3ee39fb723129a0c

  • Linux Linux

    4.10

  • KernelLinux

    From 4.10.0 · fixed in 4.19.320; From 4.20.0 · fixed in 5.4.282; From 5.5.0 · fixed in 5.10.224; From 5.11.0 · fixed in 5.15.165; From 5.16.0 · fixed in 6.1.103; From 6.2.0 · fixed in 6.6.44; From 6.7.0 · fixed in 6.10.3

References 8

git.kernel.org