Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-27388

SUNRPC: fix some memleaks in gssx_dec_option_array

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < b97c37978ca825557d331c9012e0c1ddc0e42364affected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8affected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8affected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < dd292e884c649f9b1c18af0ec75ca90b390cd044affected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 934212a623cbab851848b6de377eb476718c3e4caffected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 5e6013ae2c8d420faea553d363935f65badd32c3affected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4affected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 996997d1fb2126feda550d6adcedcbd94911fc69affected
  • 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 3cfcfc102a5e57b021b786a755a38935e357797daffected

Linux Linux

Default version status: affected

  • 3.10affected
  • 0 to < 3.10unaffected
  • 4.19.311 to ≤ 4.19.*unaffected
  • 5.4.273 to ≤ 5.4.*unaffected
  • 5.10.214 to ≤ 5.10.*unaffected
  • 5.15.153 to ≤ 5.15.*unaffected
  • 6.1.83 to ≤ 6.1.*unaffected
  • 6.6.23 to ≤ 6.6.*unaffected
  • 6.7.11 to ≤ 6.7.*unaffected
  • 6.8.2 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References