Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-39489

ipv6: sr: fix memleak in seg6_hmac_init_algo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bf355b8d2c30a289232042cacc1cfaea4923936c to < afd5730969aec960a2fee4e5ee839a6014643976affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < 4a3fcf53725b70010d1cf869a2ba549fed6b8fb3affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < daf341e0a2318b813427d5a78788c86f4a7f02beaffected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < 61d31ac85b4572d11f8071855c0ccb4f32d76c0caffected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < 599a5654215092ac22bfc453f4fd3959c55ea821affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < 0e44d6cbe8de983470c3d2f978649783384fdcb6affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < f6a99ef4e056c20a138a95cc51332b2b96c8f383affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < efb9f4f19f8e37fde43dfecebc80292d179f56c6affected

Linux Linux

Default version status: affected

  • 4.10affected
  • 0 to < 4.10unaffected
  • 4.19.316 to ≤ 4.19.*unaffected
  • 5.4.278 to ≤ 5.4.*unaffected
  • 5.10.219 to ≤ 5.10.*unaffected
  • 5.15.161 to ≤ 5.15.*unaffected
  • 6.1.93 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.9.4 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References