rxrpc: Fix memory leaks in rxkad_verify_response()
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.1%
probabilidade de exploração
0.1%top 98% das CVEs
exploração observada
nãonenhuma fonte reporta
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix memory leaks in rxkad_verify_response()
Fix rxkad_verify_response() to free the ticket and the server key under all
circumstances by initialising the ticket pointer to NULL and then making
all paths through the function after the first allocation has been done go
through a single common epilogue that just releases everything - where all
the releases skip on a NULL pointer.
Produtos afetados
Linux · LinuxReferências
https://git.kernel.org/stable/c/34f61a07e0cdefaecd3ec03bb5fb22215643678fhttps://git.kernel.org/stable/c/852b9d64cea421336579b2de3d1338dfa677e2ddhttps://git.kernel.org/stable/c/861b9a0a1823bf064a7b810d29502a9ef043f40fhttps://git.kernel.org/stable/c/c4b8f32e73eafd4a5076be890c7c8506ec04567chttps://git.kernel.org/stable/c/c91f33fb8356dedc82bc56ce210f1a5dbee62a52