In the Linux kernel, the following vulnerability has been resolved:
NFC: st21nfca: Fix memory leak in device probe and remove
'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows:
unreferenced object 0xffff88800bc06800 (size 512): comm "8", pid 11775, jiffies 4295159829 (age 9.032s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450 [<00000000c93382b3>] kmalloc_reserve+0x37/0xd0 [<000000005fea522c>] __alloc_skb+0x124/0x380 [<0000000019f29f9a>] st21nfca_hci_i2c_probe+0x170/0x8f2
Fix it by freeing 'pending_skb' in error and remove.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-preemptUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-debug-develUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-defaultUpgrade dtb-amdUpgrade kernel-azureUpgrade cluster-md-kmp-64kb | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic | Nov 19, 2024 | Feb 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub