CVE-2024-38632: vfio/pci: fix potential memory leak in vfio_intx_enable()
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: fix potential memory leak in vfiointxenable()
If vfioirqctxalloc() failed will lead to 'name' memory leak.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: fix potential memory leak in vfiointxenable()
The Linux kernel CVE team has assigned CVE-2024-38632 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024062142-CVE-2024-38632-eaf6@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38632?
The severity of CVE-2024-38632 is considered to be moderate due to the potential memory leak caused by vfio_irq_ctx_alloc() failure.
How do I fix CVE-2024-38632?
To fix CVE-2024-38632, you should upgrade to kernel version 6.6.33, 6.9.4, or 6.10 from Red Hat or corresponding versions in Debian.
Which versions are affected by CVE-2024-38632?
CVE-2024-38632 affects Linux kernel versions prior to 6.6.33, 6.9.4, and 6.10, along with specific earlier Debian linux versions.
Can CVE-2024-38632 be exploited remotely?
CVE-2024-38632 does not directly allow for remote exploitation, but a local attacker may exploit the memory leak issue.
Is CVE-2024-38632 present in all Linux distributions?
CVE-2024-38632 primarily affects Red Hat and Debian-based distributions that utilize the specific vulnerable kernel versions mentioned.