Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Gavrilov Ilia

Researcher fromInfoTeCS
#46165of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2024-8468
5.5
2023-12-07
Linux · Linux Kernel · CVE-2023-52698
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a memory leak in the `netlbl calipso add pass()` function when IPv6 support is disabled at boot. This occurs because the `calipso init()` function is not called, and as a result, the `netlbl calipso ops get()` function always returns NULL. The `netlbl calipso add pass()` function then allocates memory for the `doi def` variable but fails to free it with `calipso doi free()`, leading to a memory leak. The vulnerability was found by InfoTeCS on behalf of Linux Verification Center with Syzkaller. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.