CVE-2024-40936

EPSS 0.25%
Veröffentlicht 12.07.2024 13:15:16
Zuletzt bearbeitet 03.02.2025 15:38:33
Quelle 416baaa9-dc9f-4396-8d5f-8c081f
CVE-Watchlists
Login
Unerledigt
Login

cxl/region: Fix memregion leaks in devm_cxl_add_region()

In the Linux kernel, the following vulnerability has been resolved:

cxl/region: Fix memregion leaks in devm_cxl_add_region()

Move the mode verification to __create_region() before allocating the
memregion to avoid the memregion leaks.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 4 VulnDex Vulnerability Enrichment 3

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 6.3 < 6.6.35

Linux ≫ Linux Kernel Version >= 6.7 < 6.9.6

Linux ≫ Linux Kernel Version6.10 Updaterc1

Linux ≫ Linux Kernel Version6.10 Updaterc2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.25%	0.159

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/49ba7b515c4c0719b866d16f068e62d16a8a3dd1

Patch

https://git.kernel.org/stable/c/bbb5d8746381c82f7e0fb6171094d375b492f266

Patch

https://git.kernel.org/stable/c/d8316838aa0686da63a8be4194b7a17b0103ae4a

Patch

https://nvd.nist.gov/vuln/detail/CVE-2024-40936

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-40936

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-40936

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-40936