In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()
The cmd_buff needs to be freed when error happened in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.15Upgrade linuxUpgrade linux-azureUpgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-gkeop-5.15Upgrade linux-awsUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-fde-5.15Upgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-azure-fdeUpgrade linux-intel-iotgUpgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-gkeop | Nov 19, 2024 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub