Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net/tcp_ao: Don't leak ao_info on error-path It seems I introduced it together with TCP_AO_CMDF_AO_REQUIRED, on version 5 [1] of TCP-AO patches. Quite frustrative that having all these selftests that I've written, running kmemtest & kcov was always in todo. [1]: https://lore.kernel.org/netdev/20230215183335.800122-5-dima@arista.com/
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 0aadc73995d08f6b0dc061c14a564ffa46f5914e before ebaa7d3c26332330a48f9a15f8e518d526cc0f21; affected 0aadc73995d08f6b0dc061c14a564ffa46f5914e before f9ae848904289ddb16c7c9e4553ed4c64300de49 |
| Linux / Linux | affected 6.7; unaffected 0 before 6.7; unaffected 6.9.7 through 6.9.*; unaffected 6.10 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/ebaa7d3c26332330a48f9a15f8e518d526cc0f21
- https://git.kernel.org/stable/c/f9ae848904289ddb16c7c9e4553ed4c64300de49
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.