In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
This buffer is currently allocated in hfi1_init():
if (reinit) ret = init_after_reset(dd); else ret = loadtime_init(dd); if (ret) goto done;
/* allocate dummy tail memory for all receive contexts */ dd->rcvhdrtail_dummy_kvaddr = dma_alloc_coherent(&dd->pcidev->dev, sizeof(u64), &dd->rcvhdrtail_dummy_dma, GFP_KERNEL);
if (!dd->rcvhdrtail_dummy_kvaddr) { dd_dev_err(dd, "cannot allocate dummy tail memory\n"); ret = -ENOMEM; goto done; }
The reinit triggered path will overwrite the old allocation and leak it.
Fix by moving the allocation to hfi1_alloc_devdata() and the deallocation to hfi1_free_devdata().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-preempt-develUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-default-manUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-obs-build | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub