In the Linux kernel, the following vulnerability has been resolved:
net: mctp: take ownership of skb in mctp_local_output
Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs.
Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kselftests-kmp-default | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub