In the Linux kernel, the following vulnerability has been resolved:
NFC: st21nfca: Fix memory leak in device probe and remove
'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows:
unreferenced object 0xffff88800bc06800 (size 512): comm "8", pid 11775, jiffies 4295159829 (age 9.032s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450 [<00000000c93382b3>] kmalloc_reserve+0x37/0xd0 [<000000005fea522c>] __alloc_skb+0x124/0x380 [<0000000019f29f9a>] st21nfca_hci_i2c_probe+0x170/0x8f2
Fix it by freeing 'pending_skb' in error and remove.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade dtb-sprdUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-64kb-devel | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-4.4.0-258-generic | Nov 19, 2024 | Feb 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub