cbcvebase.
CVE-2024-27388
published 2024-05-01

CVE-2024-27388: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.96%
58.1th percentile
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths.

Affected

46 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.85-1 (bookworm)linux 6.1.85-1 (bookworm)
linuxlinux
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < b97c37978ca825557d331c9012e0c1ddc0e42364b97c37978ca825557d331c9012e0c1ddc0e42364
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < dd292e884c649f9b1c18af0ec75ca90b390cd044dd292e884c649f9b1c18af0ec75ca90b390cd044
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < 934212a623cbab851848b6de377eb476718c3e4c934212a623cbab851848b6de377eb476718c3e4c
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < 5e6013ae2c8d420faea553d363935f65badd32c35e6013ae2c8d420faea553d363935f65badd32c3
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec49806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < 996997d1fb2126feda550d6adcedcbd94911fc69996997d1fb2126feda550d6adcedcbd94911fc69
linuxlinux>= 1d658336b05f8697d6445834f8867f8ad5e4f735 < 3cfcfc102a5e57b021b786a755a38935e357797d3cfcfc102a5e57b021b786a755a38935e357797d
linuxlinux_kernel>= 0 < 5.10.216-15.10.216-1
linuxlinux_kernel>= 0 < 6.1.85-16.1.85-1
linuxlinux_kernel>= 0 < 6.7.12-16.7.12-1
linuxlinux_kernel>= 0 < 6.7.12-16.7.12-1
linuxlinux_kernel>= 0 < 5.4.0-189.2095.4.0-189.209
linuxlinux_kernel>= 0 < 5.15.0-112.1225.15.0-112.122
linuxlinux_kernel>= 0 < 6.8.0-35.356.8.0-35.35
linuxlinux_kernel>= 3.10 < 4.19.3114.19.311
linuxlinux_kernel>= 4.20 < 5.4.2735.4.273
linuxlinux_kernel>= 5.11 < 5.15.1535.15.153
linuxlinux_kernel>= 5.16 < 6.1.836.1.83
linuxlinux_kernel>= 5.5 < 5.10.2145.10.214
linuxlinux_kernel>= 6.2 < 6.6.236.6.23

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.0HIGH
vendor_ubuntu7.0HIGH
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.