CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: fix memleak in seg6hmacinitalgo
seg6hmacinitalgo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms.
Update seg6hmacexit to only free the memory when allocated, so we can reuse the code directly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39489?
CVE-2024-39489 has a medium severity rating due to its potential for causing memory leaks in the Linux kernel.
How do I fix CVE-2024-39489?
To fix CVE-2024-39489, ensure that you update to the specified patched versions of the Linux kernel which are not vulnerable.
What systems are affected by CVE-2024-39489?
CVE-2024-39489 affects various versions of the Linux kernel ranging from 4.10 to 6.6.33.
Is there a patch available for CVE-2024-39489?
Yes, patches for CVE-2024-39489 are available in the updated versions of the Linux kernel.
What is the impact of not addressing CVE-2024-39489?
Failing to address CVE-2024-39489 may lead to memory leaks, resulting in degraded system performance and potential service interruptions.