ext4: fix potential memory leak in ext4_fc_record_modified_inode() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.20 % · centile 10 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential memory leak in ext4_fc_record_modified_inode() As krealloc may return NULL, in this case 'state->fc_modified_inodes' may not be freed by krealloc, but 'state->fc_modified_inodes' already set NULL. Then will lead to 'state->fc_modified_inodes' memory leak.
Références
- https://git.kernel.org/stable/c/c9ce7766dc4e88e624c62a68221a3bbe8f06e856
- https://git.kernel.org/stable/c/9b5eb368a86f97eb9831f5b53b8e43ec69bc7cd4
- https://git.kernel.org/stable/c/c0be17635f039f864b1108efec0015c73736e414
- https://git.kernel.org/stable/c/24d39affc6be1acf6df86a8c3e2413b8a73749c7
- https://git.kernel.org/stable/c/9305721a309fa1bd7c194e0d4a2335bf3b29dca4
Références européennes
- ENISA EUVD · EUVD-2022-55690
- GCVE · GCVE-0-2022-50622
Avis du CERT-FR
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 < c9ce7766dc4e88e624c62a68221a3bbe8f06e856 ; affected 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 < 9b5eb368a86f97eb9831f5b53b8e43ec69bc7cd4 ; affected 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 < c0be17635f039f864b1108efec0015c73736e414 ; affected 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 < 24d39affc6be1acf6df86a8c3e2413b8a73749c7 ; affected 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 < 9305721a309fa1bd7c194e0d4a2335bf3b29dca4 |
| Linux · Linux | affected 5.10 ; unaffected 0 < 5.10 ; unaffected 5.10.150 ≤ 5.10.* ; unaffected 5.15.75 ≤ 5.15.* ; unaffected 5.19.17 ≤ 5.19.* ; unaffected 6.0.3 ≤ 6.0.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |