CVSS 5.5 · Medium EPSS 0,15%
Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths When processing mount options, efivarfs allocates efivarfs_fs_info (sfi) early in fs_context initialization. However, sfi is associated with the superblock and typically freed when the superblock is destroyed. If the fs_context is released (final put) before fill_super is called—such as on error paths or during reconfiguration—the sfi structure would leak, as ownership never transfers to the superblock. Implement the .free callback in efivarfs_context_ops to ensure any allocated sfi is properly freed if the fs_context is torn down before fill_super, preventing this memory leak.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.40 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.15.8 |
| linux | linux kernel | Versi 6.16 rc1 |
| linux | linux kernel | Versi 6.16 rc2 |
| linux | linux kernel | Versi 6.16 rc3 |
| linux | linux kernel | Versi 6.16 rc4 |
| linux | linux kernel | Versi 6.16 rc5 |
| linux | linux kernel | Versi 6.16 rc6 |