In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Fix a memleak bug in rvu_mbox_init()
In rvu_mbox_init(), mbox_regions is not freed or passed out under the switch-default region, which could lead to a memory leak.
Fix this bug by changing 'return err' to 'goto free_regions'.
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_OCTEONTX2_AF=y show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dtb-armUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-docs-html | Aug 9, 2024 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub