NVD Vulnerability Detail

CVE-2024-50068

Summary	In the Linux kernel, the following vulnerability has been resolved: mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() The sysfs_target->regions allocated in damon_sysfs_regions_alloc() is not freed in damon_sysfs_test_add_targets(), which cause the following memory leak, free it to fix it. unreferenced object 0xffffff80c2a8db80 (size 96): comm "kunit_try_catch", pid 187, jiffies 4294894363 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [<0000000001e3714d>] kmemleak_alloc+0x34/0x40 [<000000008e6835c1>] __kmalloc_cache_noprof+0x26c/0x2f4 [<000000001286d9f8>] damon_sysfs_test_add_targets+0x1cc/0x738 [<0000000032ef8f77>] kunit_try_run_case+0x13c/0x3ac [<00000000f3edea23>] kunit_generic_run_threadfn_adapter+0x80/0xec [<00000000adf936cf>] kthread+0x2e8/0x374 [<0000000041bb1628>] ret_from_fork+0x10/0x20
Publication Date	Oct. 29, 2024, 10:15 a.m.
Registration Date	Oct. 29, 2024, 4 p.m.
Last Update	Oct. 31, 2024, 1:57 a.m.

Affected software configurations

Related information, measures and tools

No	URL	refsource	タグ
1	https://git.kernel.org/stable/c/05d43455f6bffa6abc7b937ca58be00452e6973f		Patch
2	https://git.kernel.org/stable/c/2d6a1c835685de3b0c8e8dc871f60f4ef92ab01a		Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-401	有効期限後のメモリの解放の欠如	https://cwe.mitre.org/data/definitions/401.html

JVN Vulnerability Information

Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性

Title	Linux の Linux Kernel における有効期限後のメモリの解放の欠如に関する脆弱性
Summary	Linux の Linux Kernel には、有効期限後のメモリの解放の欠如に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 17, 2024, midnight
Registration Date	Oct. 31, 2024, 2:18 p.m.
Last Update	Oct. 31, 2024, 2:18 p.m.

Affected System

Linux

Linux Kernel 6.12

Linux Kernel 6.7 以上 6.11.5 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50068	https://www.cve.org/CVERecord?id=CVE-2024-50068
National Vulnerability Database (NVD)
2	CVE-2024-50068	https://nvd.nist.gov/vuln/detail/CVE-2024-50068

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-401	https://cwe.mitre.org/data/definitions/401.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() (05d4345)	https://git.kernel.org/stable/c/05d43455f6bffa6abc7b937ca58be00452e6973f
2	mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() (2d6a1c8)	https://git.kernel.org/stable/c/2d6a1c835685de3b0c8e8dc871f60f4ef92ab01a
Linux Kernel
3	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月31日] 掲載	Oct. 31, 2024, 2:18 p.m.