In the Linux kernel, the following vulnerability has been resolved:
tipc: fix a possible memleak in tipcbufappend
_skblinearize() doesn't free the skb when it fails, so move '*buf = NULL' after _skblinearize(), so that the skb can be freed on the err path.
[
{
"id": "CVE-2024-36954-11d0c210",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae",
"target": {
"file": "net/tipc/msg.c"
}
},
{
"id": "CVE-2024-36954-5325dbd3",
"signature_version": "v1",
"digest": {
"function_hash": "322333895397107660749756587473796504197",
"length": 1261.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-5763adb5",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97bf6f81b29a8efaf5d0983251a7450e5794370d",
"target": {
"file": "net/tipc/msg.c"
}
},
{
"id": "CVE-2024-36954-6a49bef2",
"signature_version": "v1",
"digest": {
"function_hash": "322333895397107660749756587473796504197",
"length": 1261.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@adbce6d20da6254c86425a8d4359b221b5ccbccd",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-6eb03e06",
"signature_version": "v1",
"digest": {
"function_hash": "153237565412642558541701124625322371678",
"length": 1265.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01cd1b7b685751ee422d00d050292a3d277652d6",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-7a1e5b27",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03a82f4f8144befdc10518e732e2a60b34c870e",
"target": {
"file": "net/tipc/msg.c"
}
},
{
"id": "CVE-2024-36954-8cfe309c",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01cd1b7b685751ee422d00d050292a3d277652d6",
"target": {
"file": "net/tipc/msg.c"
}
},
{
"id": "CVE-2024-36954-8d37f81f",
"signature_version": "v1",
"digest": {
"function_hash": "322333895397107660749756587473796504197",
"length": 1261.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3210d34fda4caff212cb53729e6bd46de604d565",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-a46d3bb1",
"signature_version": "v1",
"digest": {
"function_hash": "322333895397107660749756587473796504197",
"length": 1261.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@614c5a5ae45a921595952117b2e2bd4d4bf9b574",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-b11aefad",
"signature_version": "v1",
"digest": {
"function_hash": "322333895397107660749756587473796504197",
"length": 1261.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03a82f4f8144befdc10518e732e2a60b34c870e",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-b1ab7e84",
"signature_version": "v1",
"digest": {
"function_hash": "153237565412642558541701124625322371678",
"length": 1265.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-b8997551",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@adbce6d20da6254c86425a8d4359b221b5ccbccd",
"target": {
"file": "net/tipc/msg.c"
}
},
{
"id": "CVE-2024-36954-be57969e",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@614c5a5ae45a921595952117b2e2bd4d4bf9b574",
"target": {
"file": "net/tipc/msg.c"
}
},
{
"id": "CVE-2024-36954-e471e055",
"signature_version": "v1",
"digest": {
"function_hash": "67220643577685459781027109401492150703",
"length": 1261.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97bf6f81b29a8efaf5d0983251a7450e5794370d",
"target": {
"file": "net/tipc/msg.c",
"function": "tipc_buf_append"
}
},
{
"id": "CVE-2024-36954-ec90277f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c",
"target": {
"file": "net/tipc/msg.c"
}
},
{
"id": "CVE-2024-36954-f4ce3e1a",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"276683486963898110687251771633954214926",
"170527485002605332958185611957495901296",
"60471178030185653845115903197660847281",
"325215638682094795246656976397038408407",
"252764248713462698533762491555426436968",
"309536513198809298459106880615254546636"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3210d34fda4caff212cb53729e6bd46de604d565",
"target": {
"file": "net/tipc/msg.c"
}
}
]