CVE-2024-50084

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50084
In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() Commit a3c1e45156ad ("net: microchip: vcap: Fix use-after-free error in kunit test") fixed the use-after-free error, but introduced below memory leaks by removing necessary vcap_free_rule(), add it to fix it. unreferenced object 0xffffff80ca58b700 (size 192): comm "kunit_try_catch", pid 1215, jiffies 4294898264 hex dump (first 32 bytes): 00 12 7a 00 05 00 00 00 0a 00 00 00 64 00 00 00 ..z.........d... 00 00 00 00 00 00 00 00 00 04 0b cc 80 ff ff ff ................ backtrace (crc 9c09c3fe): [<0000000052a0be73>] kmemleak_alloc+0x34/0x40 [<0000000043605459>] __kmalloc_cache_noprof+0x26c/0x2f4 [<0000000040a01b8d>] vcap_alloc_rule+0x3cc/0x9c4 [<000000003fe86110>] vcap_api_encode_rule_test+0x1ac/0x16b0 [<00000000b3595fc4>] kunit_try_run_case+0x13c/0x3ac [<0000000010f5d2bf>] kunit_generic_run_threadfn_adapter+0x80/0xec [<00000000c5d82c9a>] kthread+0x2e8/0x374 [<00000000f4287308>] ret_from_fork+0x10/0x20 unreferenced object 0xffffff80cc0b0400 (size 64): comm "kunit_try_catch", pid 1215, jiffies 4294898265 hex dump (first 32 bytes): 80 04 0b cc 80 ff ff ff 18 b7 58 ca 80 ff ff ff ..........X..... 39 00 00 00 02 00 00 00 06 05 04 03 02 01 ff ff 9............... backtrace (crc daf014e9): [<0000000052a0be73>] kmemleak_alloc+0x34/0x40 [<0000000043605459>] __kmalloc_cache_noprof+0x26c/0x2f4 [<000000000ff63fd4>] vcap_rule_add_key+0x2cc/0x528 [<00000000dfdb1e81>] vcap_api_encode_rule_test+0x224/0x16b0 [<00000000b3595fc4>] kunit_try_run_case+0x13c/0x3ac [<0000000010f5d2bf>] kunit_generic_run_threadfn_adapter+0x80/0xec [<00000000c5d82c9a>] kthread+0x2e8/0x374 [<00000000f4287308>] ret_from_fork+0x10/0x20 unreferenced object 0xffffff80cc0b0700 (size 64): comm "kunit_try_catch", pid 1215, jiffies 4294898265 hex dump (first 32 bytes): 80 07 0b cc 80 ff ff ff 28 b7 58 ca 80 ff ff ff ........(.X..... 3c 00 00 00 00 00 00 00 01 2f 03 b3 ec ff ff ff <......../...... backtrace (crc 8d877792): [<0000000052a0be73>] kmemleak_alloc+0x34/0x40 [<0000000043605459>] __kmalloc_cache_noprof+0x26c/0x2f4 [<000000006eadfab7>] vcap_rule_add_action+0x2d0/0x52c [<00000000323475d1>] vcap_api_encode_rule_test+0x4d4/0x16b0 [<00000000b3595fc4>] kunit_try_run_case+0x13c/0x3ac [<0000000010f5d2bf>] kunit_generic_run_threadfn_adapter+0x80/0xec [<00000000c5d82c9a>] kthread+0x2e8/0x374 [<00000000f4287308>] ret_from_fork+0x10/0x20 unreferenced object 0xffffff80cc0b0900 (size 64): comm "kunit_try_catch", pid 1215, jiffies 4294898266 hex dump (first 32 bytes): 80 09 0b cc 80 ff ff ff 80 06 0b cc 80 ff ff ff ................ 7d 00 00 00 01 00 00 00 00 00 00 00 ff 00 00 00 }............... backtrace (crc 34181e56): [<0000000052a0be73>] kmemleak_alloc+0x34/0x40 [<0000000043605459>] __kmalloc_cache_noprof+0x26c/0x2f4 [<000000000ff63fd4>] vcap_rule_add_key+0x2cc/0x528 [<00000000991e3564>] vcap_val_rule+0xcf0/0x13e8 [<00000000fc9868e5>] vcap_api_encode_rule_test+0x678/0x16b0 [<00000000b3595fc4>] kunit_try_run_case+0x13c/0x3ac [<0000000010f5d2bf>] kunit_generic_run_threadfn_adapter+0x80/0xec [<00000000c5d82c9a>] kthread+0x2e8/0x374 [<00000000f4287308>] ret_from_fork+0x10/0x20 unreferenced object 0xffffff80cc0b0980 (size 64): comm "kunit_try_catch", pid 1215, jiffies 4294898266 hex dump (first 32 bytes): 18 b7 58 ca 80 ff ff ff 00 09 0b cc 80 ff ff ff ..X............. 67 00 00 00 00 00 00 00 01 01 74 88 c0 ff ff ff g.........t..... backtrace (crc 275fd9be): [<0000000052a0be73>] kmemleak_alloc+0x34/0x40 [<0000000043605459>] __kmalloc_cache_noprof+0x26c/0x2f4 [<000000000ff63fd4>] vcap_rule_add_key+0x2cc/0x528 [<000000001396a1a2>] test_add_de ---truncated---

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/170792097bb21e5da77443b6a03d35489813eabe Patch
https://git.kernel.org/stable/c/20b5342de51bda794791e013b90754774003a515 Patch
https://git.kernel.org/stable/c/217a3d98d1e9891a8b1438a27dfbc64ddf01f691 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
History

30 Oct 2024, 14:56

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
References () https://git.kernel.org/stable/c/170792097bb21e5da77443b6a03d35489813eabe - () https://git.kernel.org/stable/c/170792097bb21e5da77443b6a03d35489813eabe - Patch
References () https://git.kernel.org/stable/c/20b5342de51bda794791e013b90754774003a515 - () https://git.kernel.org/stable/c/20b5342de51bda794791e013b90754774003a515 - Patch
References () https://git.kernel.org/stable/c/217a3d98d1e9891a8b1438a27dfbc64ddf01f691 - () https://git.kernel.org/stable/c/217a3d98d1e9891a8b1438a27dfbc64ddf01f691 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*

29 Oct 2024, 14:34

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() el commit a3c1e45156ad ("net: microchip: vcap: Fix use-after-free error in kunit test") corrigió el error use-after-free, pero introdujo las siguientes fugas de memoria al eliminar vcap_free_rule() necesario, agréguelo para solucionarlo. objeto sin referencia 0xffffff80ca58b700 (tamaño 192): comm "kunit_try_catch", pid 1215, jiffies 4294898264 volcado hexadecimal (primeros 32 bytes): 00 12 7a 00 05 00 00 00 0a 00 00 00 64 00 00 00 ..z.........d... 00 00 00 00 00 00 00 00 00 04 0b cc 80 ff ff ff ................ backtrace (crc 9c09c3fe): [&lt;0000000052a0be73&gt;] kmemleak_alloc+0x34/0x40 [&lt;0000000043605459&gt;] __kmalloc_cache_noprof+0x26c/0x2f4 [&lt;0000000040a01b8d&gt;] vcap_alloc_rule+0x3cc/0x9c4 [&lt;000000003fe86110&gt;] vcap_api_encode_rule_test+0x1ac/0x16b0 [&lt;00000000b3595fc4&gt;] kunit_try_run_case+0x13c/0x3ac [&lt;0000000010f5d2bf&gt;] kunit_generic_run_threadfn_adapter+0x80/0xec [&lt;00000000c5d82c9a&gt;] kthread+0x2e8/0x374 [&lt;00000000f4287308&gt;] ret_from_fork+0x10/0x20 objeto sin referencia 0xffffff80cc0b0400 (tamaño 64): comm "kunit_try_catch", pid 1215, jiffies 4294898265 volcado hexadecimal (primeros 32 bytes): 80 04 0b cc 80 ff ff ff 18 b7 58 ca 80 ff ff ff ..........X..... 39 00 00 00 02 00 00 00 06 05 04 03 02 01 ff ff 9................ seguimiento inverso (crc daf014e9): [&lt;0000000052a0be73&gt;] kmemleak_alloc+0x34/0x40 [&lt;0000000043605459&gt;] __kmalloc_cache_noprof+0x26c/0x2f4 [&lt;000000000ff63fd4&gt;] vcap_rule_add_key+0x2cc/0x528 [&lt;00000000dfdb1e81&gt;] vcap_api_encode_rule_test+0x224/0x16b0 [&lt;00000000b3595fc4&gt;] kunit_try_run_case+0x13c/0x3ac [&lt;0000000010f5d2bf&gt;] kunit_generic_run_threadfn_adapter+0x80/0xec [&lt;00000000c5d82c9a&gt;] kthread+0x2e8/0x374 [&lt;00000000f4287308&gt;] ret_from_fork+0x10/0x20 objeto sin referencia 0xffffff80cc0b0700 (tamaño 64): comm "kunit_try_catch", pid 1215, jiffies 4294898265 volcado hexadecimal (primeros 32 bytes): 80 07 0b cc 80 ff ff ff 28 b7 58 ca 80 ff ff ff ........(.X..... 3c 00 00 00 00 00 00 00 01 2f 03 b3 ec ff ff ff &lt;......../...... seguimiento inverso (crc 8d877792): [&lt;0000000052a0be73&gt;] kmemleak_alloc+0x34/0x40 [&lt;0000000043605459&gt;] __kmalloc_cache_noprof+0x26c/0x2f4 [&lt;000000006eadfab7&gt;] vcap_rule_add_action+0x2d0/0x52c [&lt;00000000323475d1&gt;] vcap_api_encode_rule_test+0x4d4/0x16b0 [&lt;00000000b3595fc4&gt;] kunit_try_run_case+0x13c/0x3ac [&lt;0000000010f5d2bf&gt;] kunit_generic_run_threadfn_adapter+0x80/0xec [&lt;00000000c5d82c9a&gt;] kthread+0x2e8/0x374 [&lt;00000000f4287308&gt;] ret_from_fork+0x10/0x20 objeto sin referencia 0xffffff80cc0b0900 (tamaño 64): comm "kunit_try_catch", pid 1215, jiffies 4294898266 volcado hexadecimal (primeros 32 bytes): 80 09 0b cc 80 ff ff ff 80 06 0b cc 80 ff ff ff ................ 7d 00 00 00 01 00 00 00 00 00 00 00 ff 00 00 00 }............... seguimiento inverso (crc 34181e56): [&lt;0000000052a0be73&gt;] kmemleak_alloc+0x34/0x40 [&lt;0000000043605459&gt;] __kmalloc_cache_noprof+0x26c/0x2f4 [&lt;000000000ff63fd4&gt;] vcap_rule_add_key+0x2cc/0x528 [&lt;00000000991e3564&gt;] vcap_val_rule+0xcf0/0x13e8 [&lt;00000000fc9868e5&gt;] vcap_api_encode_rule_test+0x678/0x16b0 [&lt;00000000b3595fc4&gt;] kunit_try_run_case+0x13c/0x3ac [&lt;0000000010f5d2bf&gt;] kunit_generic_run_threadfn_adapter+0x80/0xec [&lt;00000000c5d82c9a&gt;] kthread+0x2e8/0x374 [&lt;00000000f4287308&gt;] ret_from_fork+0x10/0x20 objeto sin referencia 0xffffff80cc0b0980 (tamaño 64): comm "kunit_try_catch", pid 1215, jiffies 4294898266 volcado hexadecimal (primeros 32 bytes): 18 b7 58 ca 80 ff ff ff 00 09 0b cc 80 y siguientes y siguientes y siguientes ..X............. 67 00 00 00 00 00 00 00 01 01 74 88 c0 y siguientes y siguientes y siguientes g.........t..... seguimiento inverso (crc 275fd9be): [&lt;0000000052a0be73&gt;] kmemleak_alloc+0x34/0x40 [&lt;0000000043605459&gt;] __kmalloc_cache_noprof+0x26c/0x2f4 [&lt;000000000ff63fd4&gt;] vcap_rule_add_key+0x2cc/0x528 [&lt;0

29 Oct 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-29 01:15

Updated : 2024-10-30 14:56

NVD link : CVE-2024-50084

Mitre link : CVE-2024-50084

CVE.ORG link : CVE-2024-50084

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024