In the Linux kernel, the following vulnerability has been resolved:
tipc: fix a possible memleak in tipcbufappend
_skblinearize() doesn't free the skb when it fails, so move '*buf = NULL' after _skblinearize(), so that the skb can be freed on the err path.
{ "vanir_signatures": [ { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-11d0c210" }, { "digest": { "length": 1261.0, "function_hash": "322333895397107660749756587473796504197" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-5325dbd3" }, { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97bf6f81b29a8efaf5d0983251a7450e5794370d", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-5763adb5" }, { "digest": { "length": 1261.0, "function_hash": "322333895397107660749756587473796504197" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@adbce6d20da6254c86425a8d4359b221b5ccbccd", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-6a49bef2" }, { "digest": { "length": 1265.0, "function_hash": "153237565412642558541701124625322371678" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01cd1b7b685751ee422d00d050292a3d277652d6", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-6eb03e06" }, { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03a82f4f8144befdc10518e732e2a60b34c870e", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-7a1e5b27" }, { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01cd1b7b685751ee422d00d050292a3d277652d6", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-8cfe309c" }, { "digest": { "length": 1261.0, "function_hash": "322333895397107660749756587473796504197" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3210d34fda4caff212cb53729e6bd46de604d565", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-8d37f81f" }, { "digest": { "length": 1261.0, "function_hash": "322333895397107660749756587473796504197" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@614c5a5ae45a921595952117b2e2bd4d4bf9b574", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-a46d3bb1" }, { "digest": { "length": 1261.0, "function_hash": "322333895397107660749756587473796504197" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03a82f4f8144befdc10518e732e2a60b34c870e", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-b11aefad" }, { "digest": { "length": 1265.0, "function_hash": "153237565412642558541701124625322371678" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-b1ab7e84" }, { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@adbce6d20da6254c86425a8d4359b221b5ccbccd", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-b8997551" }, { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@614c5a5ae45a921595952117b2e2bd4d4bf9b574", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-be57969e" }, { "digest": { "length": 1261.0, "function_hash": "67220643577685459781027109401492150703" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97bf6f81b29a8efaf5d0983251a7450e5794370d", "signature_type": "Function", "target": { "function": "tipc_buf_append", "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-e471e055" }, { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-ec90277f" }, { "digest": { "line_hashes": [ "276683486963898110687251771633954214926", "170527485002605332958185611957495901296", "60471178030185653845115903197660847281", "325215638682094795246656976397038408407", "252764248713462698533762491555426436968", "309536513198809298459106880615254546636" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3210d34fda4caff212cb53729e6bd46de604d565", "signature_type": "Line", "target": { "file": "net/tipc/msg.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-36954-f4ce3e1a" } ] }