In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Fix a memleak bug in rvu_mbox_init()
In rvu_mbox_init(), mbox_regions is not freed or passed out under the switch-default region, which could lead to a memory leak.
Fix this bug by changing 'return err' to 'goto free_regions'.
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_OCTEONTX2_AF=y show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azure-vdso | Aug 9, 2024 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub