In the Linux kernel, the following vulnerability has been resolved:
ipc: fix memleak if msg_init_ns failed in create_ipc_ns
Percpu memory allocation may failed during create_ipc_ns however this fail is not handled properly since ipc sysctls and mq sysctls is not released properly. Fix this by release these two resource when failure.
Here is the kmemleak stack when percpu failed:
unreferenced object 0xffff88819de2a600 (size 512): comm "shmem_2nstest", pid 120711, jiffies 4300542254 hex dump (first 32 bytes): 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H..... 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V..... backtrace (crc be7cba35): [<ffffffff81b43f83>] __kmalloc_node_track_caller_noprof+0x333/0x420 [<ffffffff81a52e56>] kmemdup_noprof+0x26/0x50 [<ffffffff821b2f37>] setup_mq_sysctls+0x57/0x1d0 [<ffffffff821b29cc>] copy_ipcs+0x29c/0x3b0 [<ffffffff815d6a10>] create_new_namespaces+0x1d0/0x920 [<ffffffff815d7449>] copy_namespaces+0x2e9/0x3e0 [<ffffffff815458f3>] copy_process+0x29f3/0x7ff0 [<ffffffff8154b080>] kernel_clone+0xc0/0x650 [<ffffffff8154b6b1>] __do_sys_clone+0xa1/0xe0 [<ffffffff843df8ff>] do_syscall_64+0xbf/0x1c0 [<ffffffff846000b0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-modules-extra-common | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1026-nvidia | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub