Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL checks for kstrdup()
- Replace “of_find_node_by_path(”/")" with “of_root” to avoid multiple calls to “of_node_put()”.
- Fix a potential kernel oops during early boot when memory allocation fails while parsing CPU model from device tree. A flaw was found in the Linux kernel. During the system’s initial startup, a critical error can occur if memory allocation fails while the system is reading CPU information. This is due to a missing check for empty or invalid data when duplicating strings, which can lead to a system crash, resulting in a Denial of Service (DoS).
Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 13 | Planned | — |