CVE-2024-40936: cxl/region: Fix memregion leaks in devm_cxl_add_region()
Published Jul 12, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
cxl/region: Fix memregion leaks in devmcxladdregion()
Move the mode verification to createregion() before allocating the memregion to avoid the memregion leaks.
Affected Software
8 affected componentsFixes available
redhat/kernel<6.6.35
6.6.35
redhat/kernel<6.9.6
6.9.6
redhat/kernel<6.10
6.10
Linux Linux kernel>=6.3<6.6.35
Linux Linux kernel>=6.7<6.9.6
Linux Linux kernel=6.10-rc1
Linux Linux kernel=6.10-rc2
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1
Remediation
Event History
Jul 12, 2024
CVE Published
via MITRE·12:25 PM
Data Sourced
via MITRE·12:25 PM
Description
Feb 6, 2025
Data Sourced
via Ubuntu·05:08 PM
RemedyDescriptionSeverityAffected Software
Apr 19, 2025
Data Sourced
via Debian·05:23 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-40936?
CVE-2024-40936 is classified as a moderate severity vulnerability in the Linux kernel.
2
How do I fix CVE-2024-40936?
To fix CVE-2024-40936, upgrade your Linux kernel to versions 6.6.35, 6.9.6, or 6.10, among others.
3
What systems are affected by CVE-2024-40936?
CVE-2024-40936 affects various versions of the Linux kernel including those from Red Hat and Debian distributions.
4
What is the impact of CVE-2024-40936?
The impact of CVE-2024-40936 includes potential memory leaks through mismanagement of memory regions.
5
Who is the vendor for CVE-2024-40936?
The vendor for CVE-2024-40936 is the Linux kernel development community responsible for maintaining kernel code.