CVSS 5.5 · Medium EPSS 0,20%
Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolve_indirect_refs() During backref walking, at resolve_indirect_refs(), if we get an error we jump to the 'out' label and call ulist_free() on the 'parents' ulist, which frees all the elements in the ulist - however that does not free any inode lists that may be attached to elements, through the 'aux' field of a ulist node, so we end up leaking lists if we have any attached to the unodes. Fix this by calling free_leaf_list() instead of ulist_free() when we exit from resolve_indirect_refs(). The static function free_leaf_list() is moved up for this to be possible and it's slightly simplified by removing unnecessary code.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 3.5 hingga sebelum 4.14.299 |
| linux | linux kernel | Versi 4.15 hingga sebelum 4.19.265 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.224 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.154 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.78 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.0.8 |
| linux | linux kernel | Versi 6.1 rc1 |
| linux | linux kernel | Versi 6.1 rc2 |
| linux | linux kernel | Versi 6.1 rc3 |