In the Linux kernel, the following vulnerability has been resolved:
net: usb: fix memory leak in smsc75xx_bind
Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation.
backtrace: [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline] [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline] [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460 [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade perfUpgrade kernel-docUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-core | Jun 6, 2024 | Mar 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.238-182.421Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perf | Aug 28, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headers | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 25, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 6, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 6, 2024 | Mar 25, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debug-core | Jun 17, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-default-base | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-258-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1173-aws | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub