In the Linux kernel, the following vulnerability has been resolved:
NFC: st21nfca: Fix memory leak in device probe and remove
'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows:
unreferenced object 0xffff88800bc06800 (size 512): comm "8", pid 11775, jiffies 4295159829 (age 9.032s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450 [<00000000c93382b3>] kmalloc_reserve+0x37/0xd0 [<000000005fea522c>] __alloc_skb+0x124/0x380 [<0000000019f29f9a>] st21nfca_hci_i2c_probe+0x170/0x8f2
Fix it by freeing 'pending_skb' in error and remove.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-preemptUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade dtb-freescale | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-aws | Nov 19, 2024 | Feb 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub