In the Linux kernel, the following vulnerability has been resolved:
net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
The refcount leak issues take place in an error handling path. When the 3rd argument buf doesn't match with "offline", "online" or "remove", the function simply returns -EINVAL and forgets to decrease the reference count of a rpc_xprt object and a rpc_xprt_switch object increased by rpc_sysfs_xprt_kobj_get_xprt() and rpc_sysfs_xprt_kobj_get_xprt_switch(), causing reference count leaks of both unused objects.
Fix this issue by jumping to the error handling path labelled with out_put when buf matches none of "offline", "online" or "remove".
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-headers | Aug 12, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-modules | Aug 22, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jul 16, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub