PT-2024-33899 · Linux+6 · Linux Kernel+6
Sergey Senozhatsky
·
Published
2024-10-21
·
Updated
2025-10-03
·
CVE-2024-50064
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
The issue is related to memory leakage in the zram device when it has multi-streams and is reset without freeing secondary algorithms names. This can be resolved by using kfree() to free the secondary algorithms names. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider implementing a custom solution to free secondary algorithms names when resetting the zram device to prevent memory leakage.
Exploit
Fix
Information Disclosure
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu