In the Linux kernel, the following vulnerability has been resolved:
kunit: fix reference count leak in kfree_at_end
The reference counting issue happens in the normal path of kfree_at_end(). When kunit_alloc_and_get_resource() is invoked, the function forgets to handle the returned resource object, whose refcount increased inside, causing a refcount leak.
Fix this issue by calling kunit_alloc_resource() instead of kunit_alloc_and_get_resource().
Fixed the following when applying: Shuah Khan <[email protected]>
CHECK: Alignment should match open parenthesis + kunit_alloc_resource(test, NULL, kfree_res_free, GFP_KERNEL, (void *)to_free);
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub