In the Linux kernel, the following vulnerability has been resolved:
RDMA/cma: Fix rdma_resolve_route() memory leak
Fix a memory leak when "mda_resolve_route() is called more than once on the same "rdma_cm_id".
This is possible if cma_query_handler() triggers the RDMA_CM_EVENT_ROUTE_ERROR flow which puts the state machine back and allows rdma_resolve_route() to be called again.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.59-52.142Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-4.14.241-184.433Upgrade perfUpgrade kernel-tools-debuginfo | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 14, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jan 15, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1148-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-1185-awsUpgrade linux-image-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1147-awsUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-272-genericUpgrade linux-image-4.4.0-1117-fipsUpgrade linux-image-genericUpgrade linux-image-4.4.0-272-lowlatencyUpgrade linux-image-lowlatency | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub