Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2024-26839

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-17 Apr, 2024 | 10:10
Updated At-04 May, 2025 | 08:57
Rejected At-
Credits

IB/hfi1: Fix a memleak in init_credit_return

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in init_credit_return When dma_alloc_coherent fails to allocate dd->cr_base[i].va, init_credit_return should deallocate dd->cr_base and dd->cr_base[i] that allocated before. Or those resources would be never freed and a memleak is triggered.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:17 Apr, 2024 | 10:10
Updated At:04 May, 2025 | 08:57
Rejected At:
▼CVE Numbering Authority (CNA)
IB/hfi1: Fix a memleak in init_credit_return

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in init_credit_return When dma_alloc_coherent fails to allocate dd->cr_base[i].va, init_credit_return should deallocate dd->cr_base and dd->cr_base[i] that allocated before. Or those resources would be never freed and a memleak is triggered.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/infiniband/hw/hfi1/pio.c
Default Status
unaffected
Versions
Affected
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before 2e4f9f20b32658ef3724aa46f7aef4908d2609e3 (git)
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before cecfb90cf71d91e9efebd68b9e9b84661b277cc8 (git)
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before 3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7 (git)
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before 52de5805c147137205662af89ed7e083d656ae25 (git)
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before f0d857ce31a6bc7a82afcdbadb8f7417d482604b (git)
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before b41d0ade0398007fb746213f09903d52a920e896 (git)
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before 8412c86e89cc78d8b513cb25cf2157a2adf3670a (git)
  • From 7724105686e718ac476a6ad3304fea2fbcfcffde before 809aa64ebff51eb170ee31a95f83b2d21efa32e2 (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/infiniband/hw/hfi1/pio.c
Default Status
affected
Versions
Affected
  • 4.3
Unaffected
  • From 0 before 4.3 (semver)
  • From 4.19.308 through 4.19.* (semver)
  • From 5.4.270 through 5.4.* (semver)
  • From 5.10.211 through 5.10.* (semver)
  • From 5.15.150 through 5.15.* (semver)
  • From 6.1.80 through 6.1.* (semver)
  • From 6.6.19 through 6.6.* (semver)
  • From 6.7.7 through 6.7.* (semver)
  • From 6.8 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3
N/A
https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8
N/A
https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7
N/A
https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25
N/A
https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b
N/A
https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896
N/A
https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a
N/A
https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2
N/A
Hyperlink: https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3
x_transferred
https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8
x_transferred
https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7
x_transferred
https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25
x_transferred
https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b
x_transferred
https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896
x_transferred
https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a
x_transferred
https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2
x_transferred
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
x_transferred
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
x_transferred
Hyperlink: https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2
Resource:
x_transferred
Hyperlink: https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Resource:
x_transferred
Hyperlink: https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Resource:
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:17 Apr, 2024 | 10:15
Updated At:14 Jan, 2025 | 14:56

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in init_credit_return When dma_alloc_coherent fails to allocate dd->cr_base[i].va, init_credit_return should deallocate dd->cr_base and dd->cr_base[i] that allocated before. Or those resources would be never freed and a memleak is triggered.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Type: Primary
Version: 3.1
Base score: 5.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CPE Matches
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 4.3(inclusive) to 4.19.308(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 4.20(inclusive) to 5.4.270(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 5.5(inclusive) to 5.10.211(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 5.11(inclusive) to 5.15.150(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 5.16(inclusive) to 6.1.80(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 6.2(inclusive) to 6.6.19(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 6.7(inclusive) to 6.7.7(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
Debian GNU/Linux
debian
>>debian_linux>>10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-401Primarynvd@nist.gov
CWE ID: CWE-401
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670aaf854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604baf854a3a-2127-422b-91ae-364da2661108
Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlaf854a3a-2127-422b-91ae-364da2661108
Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlaf854a3a-2127-422b-91ae-364da2661108
Mailing List
Hyperlink: https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Hyperlink: https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List

Change History

0
Information is not available yet

Similar CVEs

0Records found
Details not found