In the Linux kernel, the following vulnerability has been resolved:
comedi: Fix memory leak in compat_insnlist()
`compat_insnlist()` handles the 32-bit version of the `COMEDI_INSNLIST` ioctl (whenwhen `CONFIG_COMPAT` is enabled). It allocates memory to temporarily hold an array of `struct comedi_insn` converted from the 32-bit version in user space. This memory is only being freed if there is a fault while filling the array, otherwise it is leaked.
Add a call to `kfree()` to fix the leak.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-devel | Aug 9, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub