Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path When ‘midev->allow_rx’ is false, the newly allocated skb isn’t consumed by netif_rx(), it needs to free the skb directly. A flaw was found in the Linux kernel’s Management Component Transport Protocol (MCTP) over I2C receive path. When themidev->allow_rx flag is false, a newly allocated network buffer (skb) is not properly freed. This memory leak can lead to a gradual exhaustion of system memory, potentially allowing a local attacker to cause a Denial of Service (DoS).
Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 13 | Planned | — |
| Ubuntu 24.04 | Planned | — |