In the Linux kernel, the following vulnerability has been resolved:
comedi: Fix memory leak in compat_insnlist()
`compat_insnlist()` handles the 32-bit version of the `COMEDI_INSNLIST` ioctl (whenwhen `CONFIG_COMPAT` is enabled). It allocates memory to temporarily hold an array of `struct comedi_insn` converted from the 32-bit version in user space. This memory is only being freed if there is a fault while filling the array, otherwise it is leaked.
Add a call to `kfree()` to fix the leak.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-devel | Aug 9, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub