In the Linux kernel, the following vulnerability has been resolved:
net: mctp: take ownership of skb in mctp_local_output
Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs.
Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kb | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub