CVE-2024-50165
—In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param->string when parsing mount options In bpf_parse_param(), keep the value of param->string intact so it can be freed later. Otherwise, the kmalloc area pointed to by param->string will be leaked as shown below: unreferenced object 0xffff888118c46d20 (size 8): comm "new_name", pid 12109, jiffies 4295580214 hex dump (first 8 bytes): 61 6e 79 00 38 c9 5c 7e any.8.\~ backtrace (crc e1b7f876): [ ] kmemleak_alloc+0x4b/0x80 [ ] __kmalloc_node_track_caller_noprof+0x36e/0x4a0 [ ] memdup_user+0x32/0xa0 [ ] strndup_user+0x46/0x60 [ ] __x64_sys_fsconfig+0x368/0x3d0 [ ] x64_sys_call+0xff/0x9f0 [ ] do_syscall_64+0x3b/0xc0 [ ] entry_SYSCALL_64_after_hwframe+0x4b/0x53
- Vendors
- linux
- Products
- linux kernel
- Weakness
- CWE-401
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.