In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Fix a memleak bug in rvu_mbox_init()
In rvu_mbox_init(), mbox_regions is not freed or passed out under the switch-default region, which could lead to a memory leak.
Fix this bug by changing 'return err' to 'goto free_regions'.
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_OCTEONTX2_AF=y show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-azureUpgrade dtb-apple | Aug 9, 2024 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub