CVE-2024-47755

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47755
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

23 Oct 2024, 06:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.5 		v2 : unknown
v3 : unknown
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvdimm: Se corrigen las fugas de memoria de los desarrolladores en scan_labels() scan_labels() pierde memoria cuando falla el escaneo de etiquetas y vuelve a crear un espacio de nombres "seed" predeterminado para que el espacio de usuario lo configure. El usuario root puede obligar al kernel a perder memoria. Asigne los recursos mínimos incondicionalmente y libérelos cuando no sean necesarios para evitar la fuga de memoria. Un kmemleak informa: objeto no referenciado 0xffff88800dda1980 (tamaño 16): comm "kworker/u10:5", pid 69, jiffies 4294671781 volcado hexadecimal (primeros 16 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [<00000000c5dea560>] __kmalloc+0x32c/0x470 [<000000009ed43c83>] nd_region_register_namespaces+0x6fb/0x1120 [libnvdimm] [<000000000e07a65c>] nd_region_probe+0xfe/0x210 [libnvdimm] [<000000007b79ce5f>] nvdimm_bus_probe+0x7a/0x1e0 [libnvdimm] [<00000000a5f3da2e>] really_probe+0xc6/0x390 [<00000000129e2a69>] __driver_probe_device+0x78/0x150 [<000000002dfed28b>] driver_probe_device+0x1e/0x90 [<00000000e7048de2>] __device_attach_driver+0x85/0x110 [<0000000032dca295>] bus_for_each_drv+0x85/0xe0 [<00000000391c5a7d>] __device_attach+0xbe/0x1e0 [<0000000026dabec0>] bus_probe_device+0x94/0xb0 [<00000000c590d936>] device_add+0x656/0x870 [<000000003d69bfaa>] nd_async_device_register+0xe/0x50 [libnvdimm] [<000000003f4c52a4>] async_run_entry_fn+0x2e/0x110 [<00000000e201f4b0>] process_one_work+0x1ee/0x600 [<000000006d90d5a9>] worker_thread+0x183/0x350
Summary (en) In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix devs leaks in scan_labels() scan_labels() leaks memory when label scanning fails and it falls back to just creating a default "seed" namespace for userspace to configure. Root can force the kernel to leak memory. Allocate the minimum resources unconditionally and release them when unneeded to avoid the memory leak. A kmemleak reports: unreferenced object 0xffff88800dda1980 (size 16): comm "kworker/u10:5", pid 69, jiffies 4294671781 hex dump (first 16 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [<00000000c5dea560>] __kmalloc+0x32c/0x470 [<000000009ed43c83>] nd_region_register_namespaces+0x6fb/0x1120 [libnvdimm] [<000000000e07a65c>] nd_region_probe+0xfe/0x210 [libnvdimm] [<000000007b79ce5f>] nvdimm_bus_probe+0x7a/0x1e0 [libnvdimm] [<00000000a5f3da2e>] really_probe+0xc6/0x390 [<00000000129e2a69>] __driver_probe_device+0x78/0x150 [<000000002dfed28b>] driver_probe_device+0x1e/0x90 [<00000000e7048de2>] __device_attach_driver+0x85/0x110 [<0000000032dca295>] bus_for_each_drv+0x85/0xe0 [<00000000391c5a7d>] __device_attach+0xbe/0x1e0 [<0000000026dabec0>] bus_probe_device+0x94/0xb0 [<00000000c590d936>] device_add+0x656/0x870 [<000000003d69bfaa>] nd_async_device_register+0xe/0x50 [libnvdimm] [<000000003f4c52a4>] async_run_entry_fn+0x2e/0x110 [<00000000e201f4b0>] process_one_work+0x1ee/0x600 [<000000006d90d5a9>] worker_thread+0x183/0x350 (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
References
  • {'url': 'https://git.kernel.org/stable/c/18a672c62d735744c6340eb3f5e58934a5d34cf2', 'tags': ['Patch'], 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://git.kernel.org/stable/c/45db20bdb5695d06478d35e05fb2550441bed890', 'tags': ['Patch'], 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://git.kernel.org/stable/c/62c2aa6b1f565d2fc1ec11a6e9e8336ce37a6426', 'tags': ['Patch'], 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://git.kernel.org/stable/c/939053737edb49ba5bdc5846acb45f11d15b7ab4', 'tags': ['Patch'], 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://git.kernel.org/stable/c/cdf0dfb3d183bbe0d0b6a6622c53d105074ad384', 'tags': ['Patch'], 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

22 Oct 2024, 15:46

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvdimm: Se corrigen las fugas de memoria de los desarrolladores en scan_labels() scan_labels() pierde memoria cuando falla el escaneo de etiquetas y vuelve a crear un espacio de nombres "seed" predeterminado para que el espacio de usuario lo configure. El usuario root puede obligar al kernel a perder memoria. Asigne los recursos mínimos incondicionalmente y libérelos cuando no sean necesarios para evitar la fuga de memoria. Un kmemleak informa: objeto no referenciado 0xffff88800dda1980 (tamaño 16): comm "kworker/u10:5", pid 69, jiffies 4294671781 volcado hexadecimal (primeros 16 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [&lt;00000000c5dea560&gt;] __kmalloc+0x32c/0x470 [&lt;000000009ed43c83&gt;] nd_region_register_namespaces+0x6fb/0x1120 [libnvdimm] [&lt;000000000e07a65c&gt;] nd_region_probe+0xfe/0x210 [libnvdimm] [&lt;000000007b79ce5f&gt;] nvdimm_bus_probe+0x7a/0x1e0 [libnvdimm] [&lt;00000000a5f3da2e&gt;] really_probe+0xc6/0x390 [&lt;00000000129e2a69&gt;] __driver_probe_device+0x78/0x150 [&lt;000000002dfed28b&gt;] driver_probe_device+0x1e/0x90 [&lt;00000000e7048de2&gt;] __device_attach_driver+0x85/0x110 [&lt;0000000032dca295&gt;] bus_for_each_drv+0x85/0xe0 [&lt;00000000391c5a7d&gt;] __device_attach+0xbe/0x1e0 [&lt;0000000026dabec0&gt;] bus_probe_device+0x94/0xb0 [&lt;00000000c590d936&gt;] device_add+0x656/0x870 [&lt;000000003d69bfaa&gt;] nd_async_device_register+0xe/0x50 [libnvdimm] [&lt;000000003f4c52a4&gt;] async_run_entry_fn+0x2e/0x110 [&lt;00000000e201f4b0&gt;] process_one_work+0x1ee/0x600 [&lt;000000006d90d5a9&gt;] worker_thread+0x183/0x350
References () https://git.kernel.org/stable/c/18a672c62d735744c6340eb3f5e58934a5d34cf2 - () https://git.kernel.org/stable/c/18a672c62d735744c6340eb3f5e58934a5d34cf2 - Patch
References () https://git.kernel.org/stable/c/45db20bdb5695d06478d35e05fb2550441bed890 - () https://git.kernel.org/stable/c/45db20bdb5695d06478d35e05fb2550441bed890 - Patch
References () https://git.kernel.org/stable/c/62c2aa6b1f565d2fc1ec11a6e9e8336ce37a6426 - () https://git.kernel.org/stable/c/62c2aa6b1f565d2fc1ec11a6e9e8336ce37a6426 - Patch
References () https://git.kernel.org/stable/c/939053737edb49ba5bdc5846acb45f11d15b7ab4 - () https://git.kernel.org/stable/c/939053737edb49ba5bdc5846acb45f11d15b7ab4 - Patch
References () https://git.kernel.org/stable/c/cdf0dfb3d183bbe0d0b6a6622c53d105074ad384 - () https://git.kernel.org/stable/c/cdf0dfb3d183bbe0d0b6a6622c53d105074ad384 - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401

21 Oct 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 13:15

Updated : 2024-10-23 06:15

NVD link : CVE-2024-47755

Mitre link : CVE-2024-47755

CVE.ORG link : CVE-2024-47755

JSON object : View

Products Affected

No product.

CWE

No CWE.