Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr ndr_encode_v4_ntacl() allocates sd_ndr.data via kzalloc() at entry. If any subsequent ndr_write_*() call returns error during encoding, the allocated sd_ndr.data won't be freed and causes memory leak. Move kfree(sd_ndr.data) into out label to ensure the buffer gets released on all success and error return paths.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
303fff2b8c77a85c62dbde3b27c24b084144c04c to < 306d6f370da7e0e5532dc51c972f4ce101e42431affected303fff2b8c77a85c62dbde3b27c24b084144c04c to < dc55270e410ccb4d24e637c13b5c4c25bcd106d7affected303fff2b8c77a85c62dbde3b27c24b084144c04c to < c866c3314a6853eb06c7a8bef67f43c8a8bdfb6eaffected303fff2b8c77a85c62dbde3b27c24b084144c04c to < 9b4dec75498fd0a1c9eaea680aef59c9519eb16faffected303fff2b8c77a85c62dbde3b27c24b084144c04c to < c521dd78e036b5e0cfd394dd2ff2218890dd9e41affected303fff2b8c77a85c62dbde3b27c24b084144c04c to < d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/306d6f370da7e0e5532dc51c972f4ce101e42431 ↗
- https://git.kernel.org/stable/c/dc55270e410ccb4d24e637c13b5c4c25bcd106d7 ↗
- https://git.kernel.org/stable/c/c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e ↗
- https://git.kernel.org/stable/c/9b4dec75498fd0a1c9eaea680aef59c9519eb16f ↗
- https://git.kernel.org/stable/c/c521dd78e036b5e0cfd394dd2ff2218890dd9e41 ↗
- https://git.kernel.org/stable/c/d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7 ↗