In the Linux kernel, the following vulnerability has been resolved:
nfp: Fix memory leak in nfp_cpp_area_cache_add()
In line 800 (#1), nfp_cpp_area_alloc() allocates and initializes a CPP area structure. But in line 807 (#2), when the cache is allocated failed, this CPP area structure is not freed, which will result in memory leak.
We can fix it by freeing the CPP area when the cache is allocated failed (#2).
792 int nfp_cpp_area_cache_add(struct nfp_cpp *cpp, size_t size) 793 { 794 struct nfp_cpp_area_cache *cache; 795 struct nfp_cpp_area *area;
800 area = nfp_cpp_area_alloc(cpp, NFP_CPP_ID(7, NFP_CPP_ACTION_RW, 0), 801 0, size); // #1: allocates and initializes
802 if (!area) 803 return -ENOMEM;
805 cache = kzalloc(sizeof(*cache), GFP_KERNEL); 806 if (!cache) 807 return -ENOMEM; // #2: missing free
817 return 0; 818 }
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-xilinx | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-ibmUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-gcp-4.15 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub