In the Linux kernel, the following vulnerability has been resolved:
calipso: fix memory leak in netlbl_calipso_add_pass()
If IPv6 support is disabled at boot (ipv6.disable=1), the calipso_init() -> netlbl_calipso_ops_register() function isn't called, and the netlbl_calipso_ops_get() function always returns NULL. In this case, the netlbl_calipso_add_pass() function allocates memory for the doi_def variable but doesn't free it with the calipso_doi_free().
BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-executor.1", pid 10746, jiffies 4295410986 (age 17.928s) hex dump (first 32 bytes): 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<...>] kmalloc include/linux/slab.h:552 [inline] [<...>] netlbl_calipso_add_pass net/netlabel/netlabel_calipso.c:76 [inline] [<...>] netlbl_calipso_add+0x22e/0x4f0 net/netlabel/netlabel_calipso.c:111 [<...>] genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800 [<...>] netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2515 [<...>] genl_rcv+0x29/0x40 net/netlink/genetlink.c:811 [<...>] netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] [<...>] netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1339 [<...>] netlink_sendmsg+0x90a/0xdf0 net/netlink/af_netlink.c:1934 [<...>] sock_sendmsg_nosec net/socket.c:651 [inline] [<...>] sock_sendmsg+0x157/0x190 net/socket.c:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] __sys_sendmsg+0xea/0x1b0 net/socket.c:2429 [<...>] do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 [<...>] entry_SYSCALL_64_after_hwframe+0x61/0xc6
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller
[PM: merged via the LSM tree at Jakub Kicinski request]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.209-198.812 | Jun 11, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.75-99.163Upgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azure | Jun 12, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-genericUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oracleUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub