CVE-2024-50231: iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
In the Linux kernel, the following vulnerability has been resolved:
iio: gts-helper: Fix memory leaks in iiogtsbuildavailscaletable()
modprobe iio-test-gts and rmmod it, then the following memory leak occurs:
unreferenced object 0xffffff80c810be00 (size 64): comm "kunittrycatch", pid 1654, jiffies 4294913981 hex dump (first 32 bytes): 02 00 00 00 08 00 00 00 20 00 00 00 40 00 00 00 ........ ...@... 80 00 00 00 00 02 00 00 00 04 00 00 00 08 00 00 ................ backtrace (crc a63d875e): [<0000000028c1b3c2>] kmemleakalloc+0x34/0x40 [<000000001d6ecc87>] kmallocnoprof+0x2bc/0x3c0 [<00000000393795c1>] devmiioinitiiogts+0x4b4/0x16f4 [<0000000071bb4b09>] 0xffffffdf052a62e0 [<000000000315bc18>] 0xffffffdf052a6488 [<00000000f9dc55b5>] kunittryruncase+0x13c/0x3ac [<00000000175a3fd4>] kunitgenericrunthreadfnadapter+0x80/0xec [<00000000f505065d>] kthread+0x2e8/0x374 [<00000000bbfb0e5d>] retfromfork+0x10/0x20 unreferenced object 0xffffff80cbfe9e70 (size 16): comm "kunittrycatch", pid 1658, jiffies 4294914015 hex dump (first 16 bytes): 10 00 00 00 40 00 00 00 80 00 00 00 00 00 00 00 ....@........... backtrace (crc 857f0cb4): [<0000000028c1b3c2>] kmemleakalloc+0x34/0x40 [<000000001d6ecc87>] kmallocnoprof+0x2bc/0x3c0 [<00000000393795c1>] devmiioinitiiogts+0x4b4/0x16f4 [<0000000071bb4b09>] 0xffffffdf052a62e0 [<000000007d089d45>] 0xffffffdf052a6864 [<00000000f9dc55b5>] kunittryruncase+0x13c/0x3ac [<00000000175a3fd4>] kunitgenericrunthreadfnadapter+0x80/0xec [<00000000f505065d>] kthread+0x2e8/0x374 [<00000000bbfb0e5d>] retfromfork+0x10/0x20 ......
It includes 55 times "size 64" memory leaks, which correspond to 5 times testinitiiogainscale() calls with gtstestgains size 10 (10size(int)) and gtstestitimes size 5. It also includes 51 times "size 16" memory leak, which correspond to one time testinitiiogainscale() call with gtstestgainsgainlow size 3 (3size(int)) and gtstestitimes size 5.
The reason is that the pertimegains[i] is not freed which is allocated in the "gts->numitime" for loop in iiogtsbuildavailscaletable().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50231?
CVE-2024-50231 has been classified as a moderate severity vulnerability due to memory leaks in the Linux kernel.
How do I fix CVE-2024-50231?
To fix CVE-2024-50231, update your Linux kernel to a version that includes the patch for the memory leak issue.
Which versions of the Linux kernel are affected by CVE-2024-50231?
CVE-2024-50231 affects multiple versions of the Linux kernel ranging from 6.4 to 6.6.60 and specific release candidates 6.12-rc1 to 6.12-rc5.
What is the impact of CVE-2024-50231 on system performance?
CVE-2024-50231 can lead to increased memory consumption over time, potentially affecting system performance due to memory leaks.
Is CVE-2024-50231 exploited in the wild?
As of now, there are no public reports indicating that CVE-2024-50231 is being actively exploited in the wild.