Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-26734
HistoryApr 03, 2024 - 5:00 p.m.

CVE-2024-26734 devlink: fix possible use-after-free and memory leaks in devlink_init()

2024-04-0317:00:21
Linux
github.com
1
linux kernel
devlink vulnerability
use-after-free
memory leaks
pernet operations
netlink family
unregister
cve-2024-26734

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

devlink: fix possible use-after-free and memory leaks in devlink_init()

The pernet operations structure for the subsystem must be registered
before registering the generic netlink family.

Make an unregister in case of unsuccessful registration.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial