Description
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The ctx->mech_used.data allocated by kmemdup is not freed in neither gss_import_v2_context nor it only caller gss_krb5_import_sec_context, which frees ctx on error. Thus, this patch reform the last call of gss_import_v2_context to the gss_krb5_import_ctx_v2, preventing the memleak while keepping the return formation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
47d84807762966c3611c38adecec6ea703ddda7a to < 32a15b6a9a0ac326ca65ce988a1ba046517af3d5affected47d84807762966c3611c38adecec6ea703ddda7a to < 99044c01ed5329e73651c054d8a4baacdbb1a27caffected47d84807762966c3611c38adecec6ea703ddda7a to < 47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4affected47d84807762966c3611c38adecec6ea703ddda7a to < d111e30d9cd846bb368faf3637dc0f71fcbcf822affected47d84807762966c3611c38adecec6ea703ddda7a to < e67b652d8e8591d3b1e569dbcdfcee15993e91faaffected
Linux Linux
Default version status: affected
2.6.35affected0 to < 2.6.35unaffected6.1.191 to ≤ 6.1.*unaffected6.6.23 to ≤ 6.6.*unaffected6.7.11 to ≤ 6.7.*unaffected6.8.2 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/32a15b6a9a0ac326ca65ce988a1ba046517af3d5 ↗
- https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c ↗
- https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 ↗
- https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 ↗
- https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa ↗