In the Linux kernel, the following vulnerability has been resolved:
net: usb: fix memory leak in smsc75xx_bind
Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation.
backtrace: [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline] [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline] [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460 [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modules-extra | Jun 6, 2024 | Mar 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-toolsUpgrade perf | Aug 28, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade perf | Jul 23, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Mar 25, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 6, 2024 | Mar 25, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 6, 2024 | Mar 25, 2024 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-cross-headersUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules | Jun 17, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-base | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1173-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-kvmUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-258-lowlatency | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub