In the Linux kernel, the following vulnerability has been resolved:
RDMA/cma: Fix rdma_resolve_route() memory leak
Fix a memory leak when "mda_resolve_route() is called more than once on the same "rdma_cm_id".
This is possible if cma_query_handler() triggers the RDMA_CM_EVENT_ROUTE_ERROR flow which puts the state machine back and allows rdma_resolve_route() to be called again.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.59-52.142Upgrade python-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.241-184.433Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 14, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jan 15, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-default-man | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.4.0-1185-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-fipsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1148-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1117-fipsUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-272-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-272-lowlatencyUpgrade linux-image-4.4.0-1147-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub