CVE-2024-38617 kunit/fortify: Fix mismatched kvalloc()/vfree() usage

2024-06-1913:56:16

Linux

github.com

linux

kernel

vulnerability

fix

kunit

fortify

mismatched

kvalloc

vfree

kvfree

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

kunit/fortify: Fix mismatched kvalloc()/vfree() usage

The kv*() family of tests were accidentally freeing with vfree() instead
of kvfree(). Use kvfree() instead.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "9124a2640148",
        "lessThan": "7880dbf4eafe",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9124a2640148",
        "lessThan": "42d21c972702",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9124a2640148",
        "lessThan": "03758d5a0932",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9124a2640148",
        "lessThan": "998b18072ceb",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "lib/fortify_kunit.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.2"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.33",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.8.12",
        "versionType": "custom",
        "lessThanOrEqual": "6.8.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.3",
        "versionType": "custom",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "lib/fortify_kunit.c"
    ],
    "defaultStatus": "affected"
  }
]