In the Linux kernel, the following vulnerability has been resolved:
calipso: fix memory leak in netlbl_calipso_add_pass()
If IPv6 support is disabled at boot (ipv6.disable=1), the calipso_init() -> netlbl_calipso_ops_register() function isn't called, and the netlbl_calipso_ops_get() function always returns NULL. In this case, the netlbl_calipso_add_pass() function allocates memory for the doi_def variable but doesn't free it with the calipso_doi_free().
BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-executor.1", pid 10746, jiffies 4295410986 (age 17.928s) hex dump (first 32 bytes): 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<...>] kmalloc include/linux/slab.h:552 [inline] [<...>] netlbl_calipso_add_pass net/netlabel/netlabel_calipso.c:76 [inline] [<...>] netlbl_calipso_add+0x22e/0x4f0 net/netlabel/netlabel_calipso.c:111 [<...>] genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800 [<...>] netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2515 [<...>] genl_rcv+0x29/0x40 net/netlink/genetlink.c:811 [<...>] netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] [<...>] netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1339 [<...>] netlink_sendmsg+0x90a/0xdf0 net/netlink/af_netlink.c:1934 [<...>] sock_sendmsg_nosec net/socket.c:651 [inline] [<...>] sock_sendmsg+0x157/0x190 net/socket.c:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] __sys_sendmsg+0xea/0x1b0 net/socket.c:2429 [<...>] do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 [<...>] entry_SYSCALL_64_after_hwframe+0x61/0xc6
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller
[PM: merged via the LSM tree at Jakub Kicinski request]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.148-97.158 | Jun 11, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.75-99.163Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-libbpfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-azure-baseUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-hisilicon | Jun 12, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.5 | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub