ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.114, 5.16, 6.2, 6.14, and 3 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indirection table and hash key buffer via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them. If get_rxfh() fails, the function returns an error without freeing the allocation.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From c5ed0eaddcbda56079091fc3876b140a6e70a548 · fixed in 14dbf22c397b799b3a80f63fc90c2fc0585bbeb3; From a065b996052656a65afc51ad82336dc55ae4c72f · fixed in 323faef6366349f57d4ad67d318a0c8906e360b3; From 4f038a6a02d20859a3479293cbf172b0f14cbdd6 · fixed in 33d05c22d6f227c5ae171c46df2f6f8bf48047ea; From 4f038a6a02d20859a3479293cbf172b0f14cbdd6 · fixed in 80d95d92f828cfcace955d673637d944178b435f; From 4f038a6a02d20859a3479293cbf172b0f14cbdd6 · fixed in 266297692f97008ca48bc311775c087c59bd7fe3; From 6.6.88 · fixed in 6.6.160; From 6.12.24 · fixed in 6.12.114; From 5.15.181 · fixed in 5.16; From 6.1.135 · fixed in 6.2; From 6.13.12 · fixed in 6.14; From 6.14.3 · fixed in 6.15
- Linux Linux
6.15
- KernelLinux
fixed in 6.6.160; From 6.7.0 · fixed in 6.12.114; From 6.13.0 · fixed in 6.18.35; From 6.15.0 · fixed in 7.0.12