In the Linux kernel, the following vulnerability has been resolved:
net: mctp: take ownership of skb in mctp_local_output
Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs.
Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-azure-devel | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub