PT-2025-3592 · Linux+5 · Linux Kernel+5
Wang Liang
·
Publicado
2024-12-19
·
Atualizado
2025-10-03
·
CVE-2024-57841
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A memory leak has been resolved in the Linux kernel. The issue occurs when
inet csk reqsk queue hash add() returns false in tcp conn request(), causing the function to return without freeing the allocated dst memory. This results in a memory leak. The kmemleak stack trace shows an unreferenced object, indicating the memory leak. To fix this issue, dst release() should be called to free the dst memory when inet csk reqsk queue hash add() returns false in tcp conn request().Recommendations
Update to Linux kernel version 6.6.74 or later to resolve the memory leak issue. As a temporary workaround, consider implementing a custom solution to call
dst release() when inet csk reqsk queue hash add() returns false in tcp conn request(), until an official patch is available.Exploit
Correção
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu