CVE-2024-56710

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56710

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and pages remain pinned if ceph_alloc_sparse_ext_map() fails. There is no need to delay the allocation of sparse_ext map until after the bvecs array is set up, so fix this by moving sparse_ext allocation a bit earlier. Also, make a similar adjustment in __ceph_sync_read() for consistency (a leak of the same kind in __ceph_sync_read() has been addressed differently).

References
Link Resource
https://git.kernel.org/stable/c/44e518abbb498075ae85c7d1d1a503a6bb05ea2d Patch
https://git.kernel.org/stable/c/66e0c4f91461d17d48071695271c824620bed4ef Patch
https://git.kernel.org/stable/c/eb9041837123f31d5897e99bb761f46cb4ce5859 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
History

06 Jan 2025, 17:13

Type Values Removed Values Added
CWE CWE-401
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/44e518abbb498075ae85c7d1d1a503a6bb05ea2d - () https://git.kernel.org/stable/c/44e518abbb498075ae85c7d1d1a503a6bb05ea2d - Patch
References () https://git.kernel.org/stable/c/66e0c4f91461d17d48071695271c824620bed4ef - () https://git.kernel.org/stable/c/66e0c4f91461d17d48071695271c824620bed4ef - Patch
References () https://git.kernel.org/stable/c/eb9041837123f31d5897e99bb761f46cb4ce5859 - () https://git.kernel.org/stable/c/eb9041837123f31d5897e99bb761f46cb4ce5859 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*

02 Jan 2025, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/44e518abbb498075ae85c7d1d1a503a6bb05ea2d -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ceph: se corrige la pérdida de memoria en ceph_direct_read_write() La matriz bvecs que se asigna en iter_get_bvecs_alloc() se filtra y las páginas permanecen fijadas si ceph_alloc_sparse_ext_map() falla. No es necesario retrasar la asignación del mapa sparse_ext hasta que se configure la matriz bvecs, así que solucione esto moviendo la asignación de sparse_ext un poco antes. Además, haga un ajuste similar en __ceph_sync_read() para lograr coherencia (una pérdida del mismo tipo en __ceph_sync_read() se ha abordado de forma diferente).

29 Dec 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-29 09:15

Updated : 2025-04-17 21:15

NVD link : CVE-2024-56710

Mitre link : CVE-2024-56710

CVE.ORG link : CVE-2024-56710

JSON object : View

Products Affected

linux

CWE
CWE-401

Missing Release of Memory after Effective Lifetime