In the Linux kernel, the following vulnerability has been resolved:
ipc: fix memleak if msg_init_ns failed in create_ipc_ns
Percpu memory allocation may failed during create_ipc_ns however this fail is not handled properly since ipc sysctls and mq sysctls is not released properly. Fix this by release these two resource when failure.
Here is the kmemleak stack when percpu failed:
unreferenced object 0xffff88819de2a600 (size 512): comm "shmem_2nstest", pid 120711, jiffies 4300542254 hex dump (first 32 bytes): 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H..... 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V..... backtrace (crc be7cba35): [<ffffffff81b43f83>] __kmalloc_node_track_caller_noprof+0x333/0x420 [<ffffffff81a52e56>] kmemdup_noprof+0x26/0x50 [<ffffffff821b2f37>] setup_mq_sysctls+0x57/0x1d0 [<ffffffff821b29cc>] copy_ipcs+0x29c/0x3b0 [<ffffffff815d6a10>] create_new_namespaces+0x1d0/0x920 [<ffffffff815d7449>] copy_namespaces+0x2e9/0x3e0 [<ffffffff815458f3>] copy_process+0x29f3/0x7ff0 [<ffffffff8154b080>] kernel_clone+0xc0/0x650 [<ffffffff8154b6b1>] __do_sys_clone+0xa1/0xe0 [<ffffffff843df8ff>] do_syscall_64+0xbf/0x1c0 [<ffffffff846000b0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade perf-debuginfo | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-virtual-hwe-22.04 | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub