In the Linux kernel, the following vulnerability has been resolved:
net: mctp: take ownership of skb in mctp_local_output
Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs.
Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-azure-optional | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub