In the Linux kernel, the following vulnerability has been resolved:
calipso: fix memory leak in netlbl_calipso_add_pass()
If IPv6 support is disabled at boot (ipv6.disable=1), the calipso_init() -> netlbl_calipso_ops_register() function isn't called, and the netlbl_calipso_ops_get() function always returns NULL. In this case, the netlbl_calipso_add_pass() function allocates memory for the doi_def variable but doesn't free it with the calipso_doi_free().
BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-executor.1", pid 10746, jiffies 4295410986 (age 17.928s) hex dump (first 32 bytes): 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<...>] kmalloc include/linux/slab.h:552 [inline] [<...>] netlbl_calipso_add_pass net/netlabel/netlabel_calipso.c:76 [inline] [<...>] netlbl_calipso_add+0x22e/0x4f0 net/netlabel/netlabel_calipso.c:111 [<...>] genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800 [<...>] netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2515 [<...>] genl_rcv+0x29/0x40 net/netlink/genetlink.c:811 [<...>] netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] [<...>] netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1339 [<...>] netlink_sendmsg+0x90a/0xdf0 net/netlink/af_netlink.c:1934 [<...>] sock_sendmsg_nosec net/socket.c:651 [inline] [<...>] sock_sendmsg+0x157/0x190 net/socket.c:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] __sys_sendmsg+0xea/0x1b0 net/socket.c:2429 [<...>] do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 [<...>] entry_SYSCALL_64_after_hwframe+0x61/0xc6
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller
[PM: merged via the LSM tree at Jakub Kicinski request]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Jun 11, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-tools-develUpgrade python3-perfUpgrade perf | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-appleUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-symsUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-alteraUpgrade dlm-kmp-64kb | Jun 12, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04 | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub