Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix hole runlist memory leak in insert range error path
ntfs_non_resident_attr_insert_range() allocates hole_rl before mapping the whole runlist. If ntfs_attr_map_whole_runlist() fails, the error path drops ni->runlist.lock and returns without freeing hole_rl. This leaks memory of sizeof(*hole_rl) * 2 bytes.
Fix this memory leak by freeing hole_rl before returning from that error path, matching the later error paths in the same function.
Details
- Affected product:
- Debian 10 ELS
- Affected packages:
- linux @ 4.19.0