In the Linux kernel, the following vulnerability has been resolved:
net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
The refcount leak issues take place in an error handling path. When the 3rd argument buf doesn't match with "offline", "online" or "remove", the function simply returns -EINVAL and forgets to decrease the reference count of a rpc_xprt object and a rpc_xprt_switch object increased by rpc_sysfs_xprt_kobj_get_xprt() and rpc_sysfs_xprt_kobj_get_xprt_switch(), causing reference count leaks of both unused objects.
Fix this issue by jumping to the error handling path labelled with out_put when buf matches none of "offline", "online" or "remove".
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-core | Aug 12, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-libs | Aug 22, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub