Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-35972
HistoryMay 20, 2024 - 9:41 a.m.

CVE-2024-35972 bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()

2024-05-2009:41:59
Linux
github.com
4
linux kernel
vulnerability
resolved
memory leak fix
bnxt_en
bnxt_rdma_aux_device_init

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()

If ulp = kzalloc() fails, the allocated edev will leak because it is
not properly assigned and the cleanup path will not be able to free it.
Fix it by assigning it properly immediately after allocation.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "303432211324",
        "lessThan": "c60ed825530b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "303432211324",
        "lessThan": "10a9d6a7513f",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "303432211324",
        "lessThan": "7ac10c7d728d",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.3"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.3",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.28",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.8.7",
        "versionType": "custom",
        "lessThanOrEqual": "6.8.*"
      },
      {
        "status": "unaffected",
        "version": "6.9",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c"
    ],
    "defaultStatus": "affected"
  }
]

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial