Lucene search
Redhat.comRH:CVE-2024-36967HistoryJun 14, 2024 - 4:12 a.m.
CVE-2024-36967
2024-06-1404:12:49
redhat.com
access.redhat.com
3
linux kernel
vulnerability
keys
trusted
memory leak
tpm2_key_encode
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
5.1%
In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() ‘scratch’ is never freed. Fix this by calling kfree() in the success, and in the error case.
Related
ubuntucve
ubuntucve
CVE-2024-36967
2024-06-08 00:00:00
vulnrichment
vulnrichment
CVE-2024-36967 KEYS: trusted: Fix memory leak in tpm2_key_encode()
2024-06-08 12:52:59
debiancve
debiancve
CVE-2024-36967
2024-06-08 13:15:58
cbl_mariner
cbl_mariner
CVE-2024-36967 affecting package kernel for versions less than 6.6.35.1-5
2024-07-22 15:42:40
cvelist
cvelist
CVE-2024-36967 KEYS: trusted: Fix memory leak in tpm2_key_encode()
2024-06-08 12:52:59
cve
cve
CVE-2024-36967
2024-06-08 13:15:58
osv
osv
nvd
nvd
CVE-2024-36967
2024-06-08 13:15:58
redos
redos
ROS-20240819-01
2024-08-19 00:00:00
ROS-20240816-12
2024-08-16 00:00:00
nessus
nessus
Ubuntu 22.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-6950-3)
2024-08-13 00:00:00
Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-6950-4)
2024-08-21 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6950-1)
2024-08-08 00:00:00
ubuntu
ubuntu
Linux kernel (Oracle) vulnerabilities
2024-08-13 00:00:00
Linux kernel vulnerabilities
2024-08-13 00:00:00
Linux kernel vulnerabilities
2024-08-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6950-1)
2024-08-09 00:00:00
Ubuntu: Security Advisory (USN-6950-4)
2024-08-22 00:00:00
Ubuntu: Security Advisory (USN-6950-2)
2024-08-13 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2024-07-14 08:23:38
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
5.1%
Related for RH:CVE-2024-36967