CVE-2024-36954

Updated on 30 May 2024

Severity

5.5 Medium severity

Details

CVSS score
5.5
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix a possible memleak in tipc_buf_append

__skb_linearize() doesn’t free the skb when it fails, so move ‘*buf = NULL’ after __skb_linearize(), so that the skb can be freed on the err path.

Details

Affected packages:
kernel @ 5.14.0 (+12 more)

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix a possible memleak in tipc_buf_append

__skb_linearize() doesn’t free the skb when it fails, so move ‘*buf = NULL’ after __skb_linearize(), so that the skb can be freed on the err path.

Fixes