PT-2025-3592 · Linux+5 · Linux Kernel+5
Wang Liang
·
Published
2024-12-19
·
Updated
2025-10-03
·
CVE-2024-57841
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A memory leak has been resolved in the Linux kernel. The issue occurs when
inet csk reqsk queue hash add() returns false in tcp conn request(), causing the function to return without freeing the allocated dst memory. This results in a memory leak. The kmemleak stack trace shows an unreferenced object, indicating the memory leak. To fix this issue, dst release() should be called to free the dst memory when inet csk reqsk queue hash add() returns false in tcp conn request().Recommendations
Update to Linux kernel version 6.6.74 or later to resolve the memory leak issue. As a temporary workaround, consider implementing a custom solution to call
dst release() when inet csk reqsk queue hash add() returns false in tcp conn request(), until an official patch is available.Exploit
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu