In the Linux kernel, the following vulnerability has been resolved:
calipso: fix memory leak in netlbl_calipso_add_pass()
If IPv6 support is disabled at boot (ipv6.disable=1), the calipso_init() -> netlbl_calipso_ops_register() function isn't called, and the netlbl_calipso_ops_get() function always returns NULL. In this case, the netlbl_calipso_add_pass() function allocates memory for the doi_def variable but doesn't free it with the calipso_doi_free().
BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-executor.1", pid 10746, jiffies 4295410986 (age 17.928s) hex dump (first 32 bytes): 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<...>] kmalloc include/linux/slab.h:552 [inline] [<...>] netlbl_calipso_add_pass net/netlabel/netlabel_calipso.c:76 [inline] [<...>] netlbl_calipso_add+0x22e/0x4f0 net/netlabel/netlabel_calipso.c:111 [<...>] genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800 [<...>] netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2515 [<...>] genl_rcv+0x29/0x40 net/netlink/genetlink.c:811 [<...>] netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] [<...>] netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1339 [<...>] netlink_sendmsg+0x90a/0xdf0 net/netlink/af_netlink.c:1934 [<...>] sock_sendmsg_nosec net/socket.c:651 [inline] [<...>] sock_sendmsg+0x157/0x190 net/socket.c:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] __sys_sendmsg+0xea/0x1b0 net/socket.c:2429 [<...>] do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 [<...>] entry_SYSCALL_64_after_hwframe+0x61/0xc6
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller
[PM: merged via the LSM tree at Jakub Kicinski request]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Jun 11, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade dtb-amlogic | Jun 12, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-starfiveUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-kvm | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub