CVE-2024-38632

vfio/pci: fix potential memory leak in vfio_intx_enable()

EPSS 0.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

21 Jun 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfio_intx_enable() If vfio_irq_ctx_alloc() failed will lead to 'name' memory leak.

Affected products

Linux · Linux

References

https://git.kernel.org/stable/c/0bd22a4966d55f1d2c127a53300d5c2b50152376 https://git.kernel.org/stable/c/35fef97c33f3d3ca0455f9a8e2a3f2c1f8cc9140 https://git.kernel.org/stable/c/82b951e6fbd31d85ae7f4feb5f00ddd4c5d256e2 https://git.kernel.org/stable/c/91ced077db2062604ec270b1046f8337e9090079 https://git.kernel.org/stable/c/a6d810554d7d9d07041f14c5fcd453f3d3fed594 https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html