PT-2024-28089 · Linux+7 · Linux Kernel+7
Ye Bin
·
Published
2024-04-15
·
Updated
2026-03-14
·
CVE-2024-38632
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
A potential memory leak in the Linux kernel has been resolved. The issue occurs in the
vfio intx enable() function when vfio irq ctx alloc() fails, leading to a memory leak of the name variable.Recommendations
Update to Linux kernel version 6.6.37 or later to resolve the issue. As a temporary workaround, consider restricting access to the
vfio intx enable() function until a patch is available.Exploit
Fix
DoS
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu