ZeroHour

CVE-2024-26900

CVSS 3.1
5.5 medium
EPSS
<1%p21
Published
()
Modified
Description

In the Linux kernel, the following vulnerability has been resolved: md: fix kmemleak of rdev->serial If kobject_add() is fail in bind_rdev_to_array(), 'rdev->serial' will be alloc not be freed, and kmemleak occurs. unreferenced object 0xffff88815a350000 (size 49152): comm "mdadm", pid 789, jiffies 4294716910 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc f773277a): [ ] kmemleak_alloc+0x61/0xe0 [ ] __kmalloc_large_node+0x15e/0x270 [ ] __kmalloc_node.cold+0x11/0x7f [ ] kvmalloc_node+0x74/0x150 [ ] rdev_init_serial+0x67/0x170 [ ] mddev_create_serial_pool+0x62/0x220 [ ] bind_rdev_to_array+0x2af/0x630 [ ] md_add_new_disk+0x400/0x9f0 [ ] md_ioctl+0x15bf/0x1c10 [ ] blkdev_ioctl+0x191/0x3f0 [ ] vfs_ioctl+0x22/0x60 [ ] __x64_sys_ioctl+0xba/0xe0 [ ] do_syscall_64+0x71/0x150 [ ] entry_SYSCALL_64_after_hwframe+0x6c/0x74

Vendors
linux
Products
linux kernel
Weakness
CWE-401
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.