In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()
The cmd_buff needs to be freed when error happened in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-azure-fde-5.15Upgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-riscv-5.15Upgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-azure-fdeUpgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-azureUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-gkeop-5.15Upgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-bluefield | Nov 19, 2024 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub