In the Linux kernel, the following vulnerability has been resolved:
calipso: fix memory leak in netlbl_calipso_add_pass()
If IPv6 support is disabled at boot (ipv6.disable=1), the calipso_init() -> netlbl_calipso_ops_register() function isn't called, and the netlbl_calipso_ops_get() function always returns NULL. In this case, the netlbl_calipso_add_pass() function allocates memory for the doi_def variable but doesn't free it with the calipso_doi_free().
BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-executor.1", pid 10746, jiffies 4295410986 (age 17.928s) hex dump (first 32 bytes): 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<...>] kmalloc include/linux/slab.h:552 [inline] [<...>] netlbl_calipso_add_pass net/netlabel/netlabel_calipso.c:76 [inline] [<...>] netlbl_calipso_add+0x22e/0x4f0 net/netlabel/netlabel_calipso.c:111 [<...>] genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800 [<...>] netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2515 [<...>] genl_rcv+0x29/0x40 net/netlink/genetlink.c:811 [<...>] netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] [<...>] netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1339 [<...>] netlink_sendmsg+0x90a/0xdf0 net/netlink/af_netlink.c:1934 [<...>] sock_sendmsg_nosec net/socket.c:651 [inline] [<...>] sock_sendmsg+0x157/0x190 net/socket.c:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] __sys_sendmsg+0xea/0x1b0 net/socket.c:2429 [<...>] do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 [<...>] entry_SYSCALL_64_after_hwframe+0x61/0xc6
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller
[PM: merged via the LSM tree at Jakub Kicinski request]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.209-198.812Upgrade perfUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | Jun 11, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-6.1.75-99.163Upgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-devel | Jun 12, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub