rxrpc: Fix memory leaks in rxkad_verify_response()
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix memory leaks in rxkad_verify_response()
Fix rxkad_verify_response() to free the ticket and the server key under all
circumstances by initialising the ticket pointer to NULL and then making
all paths through the function after the first allocation has been done go
through a single common epilogue that just releases everything - where all
the releases skip on a NULL pointer.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/34f61a07e0cdefaecd3ec03bb5fb22215643678fhttps://git.kernel.org/stable/c/852b9d64cea421336579b2de3d1338dfa677e2ddhttps://git.kernel.org/stable/c/861b9a0a1823bf064a7b810d29502a9ef043f40fhttps://git.kernel.org/stable/c/c4b8f32e73eafd4a5076be890c7c8506ec04567chttps://git.kernel.org/stable/c/c91f33fb8356dedc82bc56ce210f1a5dbee62a52