In the Linux kernel, the following vulnerability has been resolved:
ipc: fix memleak if msg_init_ns failed in create_ipc_ns
Percpu memory allocation may failed during create_ipc_ns however this fail is not handled properly since ipc sysctls and mq sysctls is not released properly. Fix this by release these two resource when failure.
Here is the kmemleak stack when percpu failed:
unreferenced object 0xffff88819de2a600 (size 512): comm "shmem_2nstest", pid 120711, jiffies 4300542254 hex dump (first 32 bytes): 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H..... 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V..... backtrace (crc be7cba35): [<ffffffff81b43f83>] __kmalloc_node_track_caller_noprof+0x333/0x420 [<ffffffff81a52e56>] kmemdup_noprof+0x26/0x50 [<ffffffff821b2f37>] setup_mq_sysctls+0x57/0x1d0 [<ffffffff821b29cc>] copy_ipcs+0x29c/0x3b0 [<ffffffff815d6a10>] create_new_namespaces+0x1d0/0x920 [<ffffffff815d7449>] copy_namespaces+0x2e9/0x3e0 [<ffffffff815458f3>] copy_process+0x29f3/0x7ff0 [<ffffffff8154b080>] kernel_clone+0xc0/0x650 [<ffffffff8154b6b1>] __do_sys_clone+0xa1/0xe0 [<ffffffff843df8ff>] do_syscall_64+0xbf/0x1c0 [<ffffffff846000b0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azure-nvidia | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub