In the Linux kernel, the following vulnerability has been resolved:
ipc: fix memleak if msg_init_ns failed in create_ipc_ns
Percpu memory allocation may failed during create_ipc_ns however this fail is not handled properly since ipc sysctls and mq sysctls is not released properly. Fix this by release these two resource when failure.
Here is the kmemleak stack when percpu failed:
unreferenced object 0xffff88819de2a600 (size 512): comm "shmem_2nstest", pid 120711, jiffies 4300542254 hex dump (first 32 bytes): 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H..... 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V..... backtrace (crc be7cba35): [<ffffffff81b43f83>] __kmalloc_node_track_caller_noprof+0x333/0x420 [<ffffffff81a52e56>] kmemdup_noprof+0x26/0x50 [<ffffffff821b2f37>] setup_mq_sysctls+0x57/0x1d0 [<ffffffff821b29cc>] copy_ipcs+0x29c/0x3b0 [<ffffffff815d6a10>] create_new_namespaces+0x1d0/0x920 [<ffffffff815d7449>] copy_namespaces+0x2e9/0x3e0 [<ffffffff815458f3>] copy_process+0x29f3/0x7ff0 [<ffffffff8154b080>] kernel_clone+0xc0/0x650 [<ffffffff8154b6b1>] __do_sys_clone+0xa1/0xe0 [<ffffffff843df8ff>] do_syscall_64+0xbf/0x1c0 [<ffffffff846000b0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-modules-extra-common | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-24.04a | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub