In the Linux kernel, the following vulnerability has been resolved:
ipc: fix memleak if msg_init_ns failed in create_ipc_ns
Percpu memory allocation may failed during create_ipc_ns however this fail is not handled properly since ipc sysctls and mq sysctls is not released properly. Fix this by release these two resource when failure.
Here is the kmemleak stack when percpu failed:
unreferenced object 0xffff88819de2a600 (size 512): comm "shmem_2nstest", pid 120711, jiffies 4300542254 hex dump (first 32 bytes): 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H..... 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V..... backtrace (crc be7cba35): [<ffffffff81b43f83>] __kmalloc_node_track_caller_noprof+0x333/0x420 [<ffffffff81a52e56>] kmemdup_noprof+0x26/0x50 [<ffffffff821b2f37>] setup_mq_sysctls+0x57/0x1d0 [<ffffffff821b29cc>] copy_ipcs+0x29c/0x3b0 [<ffffffff815d6a10>] create_new_namespaces+0x1d0/0x920 [<ffffffff815d7449>] copy_namespaces+0x2e9/0x3e0 [<ffffffff815458f3>] copy_process+0x29f3/0x7ff0 [<ffffffff8154b080>] kernel_clone+0xc0/0x650 [<ffffffff8154b6b1>] __do_sys_clone+0xa1/0xe0 [<ffffffff843df8ff>] do_syscall_64+0xbf/0x1c0 [<ffffffff846000b0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-static | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-awsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-gcp-lts-24.04 | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub