The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Fix a memleak bug in rvu_mbox_init()
In rvu_mbox_init(), mbox_regions is not freed or passed out under the switch-default region, which could lead to a memory leak.
Fix this bug by changing 'return err' to 'goto free_regions'.
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_OCTEONTX2_AF=y show no new warnings, and our static analyzer no longer warns about this code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-sourceUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-amlogic | Aug 9, 2024 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub