In the Linux kernel, the following vulnerability has been resolved:
net: fix memory leak in tcp_conn_request()
If inet_csk_reqsk_queue_hash_add() return false, tcp_conn_request() will return without free the dst memory, which allocated in af_ops->route_req.
Here is the kmemleak stack:
unreferenced object 0xffff8881198631c0 (size 240): comm "softirq", pid 0, jiffies 4299266571 (age 1802.392s) hex dump (first 32 bytes): 00 10 9b 03 81 88 ff ff 80 98 da bc ff ff ff ff ................ 81 55 18 bb ff ff ff ff 00 00 00 00 00 00 00 00 .U.............. backtrace: [<ffffffffb93e8d4c>] kmem_cache_alloc+0x60c/0xa80 [<ffffffffba11b4c5>] dst_alloc+0x55/0x250 [<ffffffffba227bf6>] rt_dst_alloc+0x46/0x1d0 [<ffffffffba23050a>] __mkroute_output+0x29a/0xa50 [<ffffffffba23456b>] ip_route_output_key_hash+0x10b/0x240 [<ffffffffba2346bd>] ip_route_output_flow+0x1d/0x90 [<ffffffffba254855>] inet_csk_route_req+0x2c5/0x500 [<ffffffffba26b331>] tcp_conn_request+0x691/0x12c0 [<ffffffffba27bd08>] tcp_rcv_state_process+0x3c8/0x11b0 [<ffffffffba2965c6>] tcp_v4_do_rcv+0x156/0x3b0 [<ffffffffba299c98>] tcp_v4_rcv+0x1cf8/0x1d80 [<ffffffffba239656>] ip_protocol_deliver_rcu+0xf6/0x360 [<ffffffffba2399a6>] ip_local_deliver_finish+0xe6/0x1e0 [<ffffffffba239b8e>] ip_local_deliver+0xee/0x360 [<ffffffffba239ead>] ip_rcv+0xad/0x2f0 [<ffffffffba110943>] __netif_receive_skb_one_core+0x123/0x140
Call dst_release() to free the dst memory when inet_csk_reqsk_queue_hash_add() return false in tcp_conn_request().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Mar 14, 2025 | Jan 15, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-modules-extra-common | Mar 27, 2025 | Jan 15, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 14, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-intelUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1033-nvidia-tegra | Mar 28, 2025 | Jan 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub