rxrpc: Fix memory leaks in rxkad_verify_response()
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.1%
probabilidad de explotación
0.1%top 98% de las CVE
explotación observada
noninguna fuente lo reporta
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix memory leaks in rxkad_verify_response()
Fix rxkad_verify_response() to free the ticket and the server key under all
circumstances by initialising the ticket pointer to NULL and then making
all paths through the function after the first allocation has been done go
through a single common epilogue that just releases everything - where all
the releases skip on a NULL pointer.
Productos afectados
Linux · LinuxReferencias
https://git.kernel.org/stable/c/34f61a07e0cdefaecd3ec03bb5fb22215643678fhttps://git.kernel.org/stable/c/852b9d64cea421336579b2de3d1338dfa677e2ddhttps://git.kernel.org/stable/c/861b9a0a1823bf064a7b810d29502a9ef043f40fhttps://git.kernel.org/stable/c/c4b8f32e73eafd4a5076be890c7c8506ec04567chttps://git.kernel.org/stable/c/c91f33fb8356dedc82bc56ce210f1a5dbee62a52