In the Linux kernel, the following vulnerability has been resolved:
net: usb: fix memory leak in smsc75xx_bind
Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation.
backtrace: [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline] [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline] [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460 [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-devel | Jun 6, 2024 | Mar 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools | Aug 28, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perf | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | Mar 25, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 6, 2024 | Mar 25, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-debug-debuginfo | Jun 17, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-64kb | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-kvmUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-virtual | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub