by Kastro CVE-2024-27388
Linux Linux — SUNRPC: fix some memleaks in gssx_dec_option_array
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths.
Affected
ProductAffectedFixed inSource
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < b97c37978ca825557d331c9012e0c1ddc0e42364b97c37978ca825557d331c9012e0c1ddc0e42364CNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8CNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8CNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < dd292e884c649f9b1c18af0ec75ca90b390cd044dd292e884c649f9b1c18af0ec75ca90b390cd044CNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < 934212a623cbab851848b6de377eb476718c3e4c934212a623cbab851848b6de377eb476718c3e4cCNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < 5e6013ae2c8d420faea553d363935f65badd32c35e6013ae2c8d420faea553d363935f65badd32c3CNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec49806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4CNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < 996997d1fb2126feda550d6adcedcbd94911fc69996997d1fb2126feda550d6adcedcbd94911fc69CNA
Linux1d658336b05f8697d6445834f8867f8ad5e4f735 – < 3cfcfc102a5e57b021b786a755a38935e357797d3cfcfc102a5e57b021b786a755a38935e357797dCNA
Linux3.10–CNA
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial