Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indirection table and hash key buffer via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them. If get_rxfh() fails, the function returns an error without freeing the allocation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c5ed0eaddcbda56079091fc3876b140a6e70a548 before 14dbf22c397b799b3a80f63fc90c2fc0585bbeb3; affected a065b996052656a65afc51ad82336dc55ae4c72f before 323faef6366349f57d4ad67d318a0c8906e360b3; affected 4f038a6a02d20859a3479293cbf172b0f14cbdd6 before 33d05c22d6f227c5ae171c46df2f6f8bf48047ea; affected 4f038a6a02d20859a3479293cbf172b0f14cbdd6 before 80d95d92f828cfcace955d673637d944178b435f; affected 4f038a6a02d20859a3479293cbf172b0f14cbdd6 before 266297692f97008ca48bc311775c087c59bd7fe3; affected 81a5174e64ce4fb7b7a2f6499b835c904c9451ee; affected ec9faff49a4ea27731de39cb887b7e590e93157b; affected adee9db710a6117b978a25ed4153846b7c56ec9a; affected 5eb3fdc4b6281b29e830300c866a36d90442b1f0; affected 6.6.88 before 6.6.160; affected 6.12.24 before 6.12.114; affected 5.15.181 before 5.16; affected 6.1.135 before 6.2; affected 6.13.12 before 6.14; affected 6.14.3 before 6.15 |
| Linux / Linux | affected 6.15; unaffected 0 before 6.15; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.35 through 6.18.*; unaffected 7.0.12 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/14dbf22c397b799b3a80f63fc90c2fc0585bbeb3
- https://git.kernel.org/stable/c/323faef6366349f57d4ad67d318a0c8906e360b3
- https://git.kernel.org/stable/c/33d05c22d6f227c5ae171c46df2f6f8bf48047ea
- https://git.kernel.org/stable/c/80d95d92f828cfcace955d673637d944178b435f
- https://git.kernel.org/stable/c/266297692f97008ca48bc311775c087c59bd7fe3