In the Linux kernel, the following vulnerability has been resolved:
net: mctp: take ownership of skb in mctp_local_output
Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs.
Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade dtb-qcomUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-optional | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub