In the Linux kernel, the following vulnerability has been resolved:
uio_hv_generic: Fix a memory leak in error handling paths
If 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be updated and 'hv_uio_cleanup()' in the error handling path will not be able to free the corresponding buffer.
In such a case, we need to free the buffer explicitly.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Aug 2, 2024 | Mar 1, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | May 13, 2024 | Mar 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Mar 1, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 1, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-default | Aug 9, 2024 | Mar 1, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-bluefieldUpgrade linux-aws-5.4 | Nov 19, 2024 | Mar 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub