CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: fix memleak in seg6hmacinitalgo
seg6hmacinitalgo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms.
Update seg6hmacexit to only free the memory when allocated, so we can reuse the code directly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.94-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.9.7-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
Update ipv6 seg6_hmac_init_algo to clean up previously allocated memory and crypto tfms when an allocation fails; update seg6_hmac_exit to free memory only when it was allocated so its cleanup code can be reused.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39489?
CVE-2024-39489 has a medium severity rating due to its potential for causing memory leaks in the Linux kernel.
How do I fix CVE-2024-39489?
To fix CVE-2024-39489, ensure that you update to the specified patched versions of the Linux kernel which are not vulnerable.
What systems are affected by CVE-2024-39489?
CVE-2024-39489 affects various versions of the Linux kernel ranging from 4.10 to 6.6.33.
Is there a patch available for CVE-2024-39489?
Yes, patches for CVE-2024-39489 are available in the updated versions of the Linux kernel.
What is the impact of not addressing CVE-2024-39489?
Failing to address CVE-2024-39489 may lead to memory leaks, resulting in degraded system performance and potential service interruptions.