Description
In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctp_local_output Currently, mctp_local_output only takes ownership of skb on success, and we may leak an skb if mctp_local_output fails in specific states; the skb ownership isn't transferred until the actual output routing occurs. Instead, make mctp_local_output free the skb on all error paths up to the route action, so it always consumes the passed skb.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
833ef3b91de692ef33b800bca6b1569c39dece74 to < a3c8fa54e904b0ddb52a08cc2d8ac239054f61fdaffected833ef3b91de692ef33b800bca6b1569c39dece74 to < cbebc55ceacef1fc0651e80e0103cc184552fc68affected833ef3b91de692ef33b800bca6b1569c39dece74 to < a639441c880ac479495e5ab37e3c29f21ae5771baffected833ef3b91de692ef33b800bca6b1569c39dece74 to < 3773d65ae5154ed7df404b050fd7387a36ab5ef3affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.1.81 to ≤ 6.1.*unaffected6.6.21 to ≤ 6.6.*unaffected6.7.9 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected