Bug 2327339 (CVE-2024-53077) - CVE-2024-53077 kernel: rpcrdma: Always release the rpcrdma_device's xa_array
Summary: CVE-2024-53077 kernel: rpcrdma: Always release the rpcrdma_device's xa_array
Keywords:
Status: NEW
Alias: CVE-2024-53077
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2327483
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-19 18:01 UTC by OSIDB Bzimport
Modified: 2024-11-21 19:07 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-19 18:01:48 UTC
In the Linux kernel, the following vulnerability has been resolved:

rpcrdma: Always release the rpcrdma_device's xa_array

Dai pointed out that the xa_init_flags() in rpcrdma_add_one() needs
to have a matching xa_destroy() in rpcrdma_remove_one() to release
underlying memory that the xarray might have accrued during
operation.


Note You need to log in before you can comment on or make changes to this bug.