CVE-2024-26839: IB/hfi1: Fix a memleak in init_credit_return
In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix a memleak in initcreditreturn
When dmaalloccoherent fails to allocate dd->crbase[i].va, initcreditreturn should deallocate dd->crbase and dd->crbase[i] that allocated before. Or those resources would be never freed and a memleak is triggered.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
When dma_alloc_coherent fails to allocate dd->cr_base[i].va in init_credit_return, deallocate dd->cr_base and all previously allocated dd->cr_base[i] resources to prevent a memory leak.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26839?
CVE-2024-26839 has been classified with a moderate severity level due to potential memory leakage issues in the Linux kernel.
How do I fix CVE-2024-26839?
To fix CVE-2024-26839, you should update to the recommended patched versions of the Linux kernel provided by your distribution.
Which versions of the Linux kernel are affected by CVE-2024-26839?
CVE-2024-26839 affects various versions of the Linux kernel from 4.3 up to 6.8-rc5.
What are the consequences of CVE-2024-26839 if not addressed?
If not addressed, CVE-2024-26839 may lead to increased memory usage and potential performance degradation in affected systems.
Is CVE-2024-26839 specific to any Linux distributions?
CVE-2024-26839 is not specific to any one distribution but affects the Linux kernel across multiple distributions, including Debian.