CVE-2024-47677: exfat: resolve memory leak from exfat_create_upcase_table()
In the Linux kernel, the following vulnerability has been resolved:
exfat: resolve memory leak from exfatcreateupcasetable()
If exfatloadupcasetable reaches end and returns -EINVAL, allocated memory doesn't get freed and while exfatloaddefaultupcasetable allocates more memory, leading to a memory leak.
Here's link to syzkaller crash report illustrating this issue: https://syzkaller.appspot.com/text?tag=CrashReport&x=1406c201980000
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47677?
CVE-2024-47677 is considered a medium severity vulnerability due to its potential to cause a memory leak in the Linux kernel.
How do I fix CVE-2024-47677?
To fix CVE-2024-47677, it is recommended to update the Linux kernel to versions later than 6.10.13 or 6.11.2 where the vulnerability has been patched.
What components are affected by CVE-2024-47677?
CVE-2024-47677 affects the exFAT file system implementations within versions of the Linux kernel between 6.8 and 6.11.
What is the impact of CVE-2024-47677?
The impact of CVE-2024-47677 is primarily a memory leak that could lead to increased memory consumption over time.
Is CVE-2024-47677 a remote exploit?
CVE-2024-47677 is not classified as a remotely exploitable vulnerability but affects local system performance.