Description
In the Linux kernel, the following vulnerability has been resolved: kernel/resource: fix kfree() of bootmem memory again Since commit ebff7d8f270d ("mem hotunplug: fix kfree() of bootmem memory"), we could get a resource allocated during boot via alloc_resource(). And it's required to release the resource using free_resource(). Howerver, many people use kfree directly which will result in kernel BUG. In order to fix this without fixing every call site, just leak a couple of bytes in such corner case.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ebff7d8f270d045338d9f4796014f4db429a17f9 to < 3379a60f6bb4afcd9c456e340ac525ae649d3ce7affectedebff7d8f270d045338d9f4796014f4db429a17f9 to < a9e88c2618d228d7a4e7e515cf30dc0d0d813f27affectedebff7d8f270d045338d9f4796014f4db429a17f9 to < d7faa04a44a0c37ac3d222fa8e0bdcbfcee9c0c8affectedebff7d8f270d045338d9f4796014f4db429a17f9 to < ab86020070999e758ce2e60c4348f20bf7ddba56affectedebff7d8f270d045338d9f4796014f4db429a17f9 to < 0cbcc92917c5de80f15c24d033566539ad696892affected
Linux Linux
Default version status: affected
3.10affected0 to < 3.10unaffected5.10.237 to ≤ 5.10.*unaffected5.15.33 to ≤ 5.15.*unaffected5.16.19 to ≤ 5.16.*unaffected5.17.2 to ≤ 5.17.*unaffected5.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3379a60f6bb4afcd9c456e340ac525ae649d3ce7 ↗
- https://git.kernel.org/stable/c/a9e88c2618d228d7a4e7e515cf30dc0d0d813f27 ↗
- https://git.kernel.org/stable/c/d7faa04a44a0c37ac3d222fa8e0bdcbfcee9c0c8 ↗
- https://git.kernel.org/stable/c/ab86020070999e758ce2e60c4348f20bf7ddba56 ↗
- https://git.kernel.org/stable/c/0cbcc92917c5de80f15c24d033566539ad696892 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗