CVE-2024-41076

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix memory leak in nfs4_set_security_label We leak nfs_fattr and nfs4_label every time we set a security xattr.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

22 Aug 2024, 13:23

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: NFSv4: corrige la pérdida de memoria en nfs4_set_security_label Filtramos nfs_fattr y nfs4_label cada vez que configuramos un xattr de seguridad.
References () https://git.kernel.org/stable/c/899604a7c958771840941caff9ee3dd8193d984c - () https://git.kernel.org/stable/c/899604a7c958771840941caff9ee3dd8193d984c - Patch
References () https://git.kernel.org/stable/c/aad11473f8f4be3df86461081ce35ec5b145ba68 - () https://git.kernel.org/stable/c/aad11473f8f4be3df86461081ce35ec5b145ba68 - Patch
References () https://git.kernel.org/stable/c/b98090699319e64f5de1e8db5bb75870f1eb1c6e - () https://git.kernel.org/stable/c/b98090699319e64f5de1e8db5bb75870f1eb1c6e - Patch
References () https://git.kernel.org/stable/c/d130220ccc94d74d70da984a199477937e7bf03c - () https://git.kernel.org/stable/c/d130220ccc94d74d70da984a199477937e7bf03c - Patch

29 Jul 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-29 15:15

Updated : 2024-08-22 13:23


NVD link : CVE-2024-41076

Mitre link : CVE-2024-41076

CVE.ORG link : CVE-2024-41076


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime