CVE-2024-27418: net: mctp: take ownership of skb in mctp_local_output
In the Linux kernel, the following vulnerability has been resolved:
net: mctp: take ownership of skb in mctplocaloutput
Currently, mctplocaloutput only takes ownership of skb on success, and we may leak an skb if mctplocaloutput fails in specific states; the skb ownership isn't transferred until the actual output routing occurs.
Instead, make mctplocaloutput free the skb on all error paths up to the route action, so it always consumes the passed skb.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.82-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.7.9-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
ubuntu/linux-raspi-realtimeto a version that resolves this vulnerability.Fixed in 6.8.0-2002.2 - Compensating control
Update mctp_local_output so it frees or otherwise consumes the passed skb on all error paths up to the route action, ensuring skb ownership is always consumed and preventing leaks.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27418?
CVE-2024-27418 is classified as a moderate severity vulnerability due to potential memory leaks in the Linux kernel.
How do I fix CVE-2024-27418?
To fix CVE-2024-27418, update your Linux kernel to the latest version available for your distribution that includes the patch.
What versions of the Linux kernel are affected by CVE-2024-27418?
CVE-2024-27418 affects earlier versions of the Linux kernel prior to the release that addresses this specific vulnerability.
What is the impact of CVE-2024-27418?
The impact of CVE-2024-27418 includes the potential for memory leaks which may lead to resource exhaustion on affected systems.
Is CVE-2024-27418 exploitable remotely?
CVE-2024-27418 is not considered to be remotely exploitable as it requires specific local conditions to cause the vulnerability.