CVE-2024-38617
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-38617
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38617.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-38617
- Downstream
- Related
- Published
- 2024-06-19T13:56:16Z
- Modified
- 2025-10-21T22:53:29.932244Z
- Summary
- kunit/fortify: Fix mismatched kvalloc()/vfree() usage
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
kunit/fortify: Fix mismatched kvalloc()/vfree() usage
The kv*() family of tests were accidentally freeing with vfree() instead of kvfree(). Use kvfree() instead.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/03758d5a0932016b6d5f5bfbca580177e6bc937a
- https://git.kernel.org/stable/c/42d21c9727028fe7ee392223ba127484b1b8677e
- https://git.kernel.org/stable/c/7880dbf4eafe22a6a41a42e774f1122c814ed02d
- https://git.kernel.org/stable/c/998b18072ceb0613629c256b409f4d299829c7ec
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9124a26401483bf2b13a99cb4317dce3f677060fFixed7880dbf4eafe22a6a41a42e774f1122c814ed02d
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9124a26401483bf2b13a99cb4317dce3f677060fFixed42d21c9727028fe7ee392223ba127484b1b8677e
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9124a26401483bf2b13a99cb4317dce3f677060fFixed03758d5a0932016b6d5f5bfbca580177e6bc937a
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9124a26401483bf2b13a99cb4317dce3f677060fFixed998b18072ceb0613629c256b409f4d299829c7ec
Affected versions
v6.*
v6.1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.10
v6.8.11
v6.8.2
v6.8.3
v6.8.4
v6.8.5
v6.8.6
v6.8.7
v6.8.8
v6.8.9
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
Database specific
vanir_signatures
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"167543584095237390722757574329838801005",
"9913561776851120403732489234184376760",
"596459028848294784390410991726643264",
"20916218915809960938870402545260386579",
"258267901529733811284677144012454927565",
"2207002598823217822821970953346273477",
"85223425848276208290297860512811490213",
"265921132853882901446634652674338049614",
"214281389530463960254193039373650975832",
"23429364366431508284723481961355005846",
"60658837780277584188269530258552126146",
"71149116640702609940694752204629713210",
"325223442639789769443435642602598640168",
"117746956106852037424547254903622019577",
"222213190337357645406276963140046723874",
"138773972536812843333579000084093121797",
"324330602927968632989879941316317192930",
"78569389024843444745635784004122135805",
"170658827538874299797826882346383563426",
"103732031364408011376912279288484399838",
"150837434984328378196525896327522819678",
"274434441491179446449130095677034030267",
"265014959100465920608668965175592574325",
"111203493770144942207043686959150281889",
"198533844150030539452969040176518984417"
],
"threshold": 0.9
},
"target": {
"file": "lib/fortify_kunit.c"
},
"id": "CVE-2024-38617-01349b55",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@998b18072ceb0613629c256b409f4d299829c7ec",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"167543584095237390722757574329838801005",
"9913561776851120403732489234184376760",
"596459028848294784390410991726643264",
"20916218915809960938870402545260386579",
"258267901529733811284677144012454927565",
"2207002598823217822821970953346273477",
"85223425848276208290297860512811490213",
"265921132853882901446634652674338049614",
"214281389530463960254193039373650975832",
"23429364366431508284723481961355005846",
"60658837780277584188269530258552126146",
"71149116640702609940694752204629713210",
"325223442639789769443435642602598640168",
"117746956106852037424547254903622019577",
"222213190337357645406276963140046723874",
"138773972536812843333579000084093121797",
"324330602927968632989879941316317192930",
"78569389024843444745635784004122135805",
"170658827538874299797826882346383563426",
"103732031364408011376912279288484399838",
"150837434984328378196525896327522819678",
"274434441491179446449130095677034030267",
"265014959100465920608668965175592574325",
"111203493770144942207043686959150281889",
"198533844150030539452969040176518984417"
],
"threshold": 0.9
},
"target": {
"file": "lib/fortify_kunit.c"
},
"id": "CVE-2024-38617-5945cbfe",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03758d5a0932016b6d5f5bfbca580177e6bc937a",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"167543584095237390722757574329838801005",
"9913561776851120403732489234184376760",
"596459028848294784390410991726643264",
"20916218915809960938870402545260386579",
"258267901529733811284677144012454927565",
"2207002598823217822821970953346273477",
"85223425848276208290297860512811490213",
"265921132853882901446634652674338049614",
"214281389530463960254193039373650975832",
"23429364366431508284723481961355005846",
"60658837780277584188269530258552126146",
"71149116640702609940694752204629713210",
"325223442639789769443435642602598640168",
"117746956106852037424547254903622019577",
"222213190337357645406276963140046723874",
"138773972536812843333579000084093121797",
"324330602927968632989879941316317192930",
"78569389024843444745635784004122135805",
"170658827538874299797826882346383563426",
"103732031364408011376912279288484399838",
"150837434984328378196525896327522819678",
"274434441491179446449130095677034030267",
"265014959100465920608668965175592574325",
"111203493770144942207043686959150281889",
"198533844150030539452969040176518984417"
],
"threshold": 0.9
},
"target": {
"file": "lib/fortify_kunit.c"
},
"id": "CVE-2024-38617-94152c11",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42d21c9727028fe7ee392223ba127484b1b8677e",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"167543584095237390722757574329838801005",
"9913561776851120403732489234184376760",
"596459028848294784390410991726643264",
"20916218915809960938870402545260386579",
"258267901529733811284677144012454927565",
"2207002598823217822821970953346273477",
"85223425848276208290297860512811490213",
"265921132853882901446634652674338049614",
"214281389530463960254193039373650975832",
"23429364366431508284723481961355005846",
"60658837780277584188269530258552126146",
"71149116640702609940694752204629713210",
"325223442639789769443435642602598640168",
"117746956106852037424547254903622019577",
"222213190337357645406276963140046723874",
"138773972536812843333579000084093121797",
"324330602927968632989879941316317192930",
"78569389024843444745635784004122135805",
"170658827538874299797826882346383563426",
"103732031364408011376912279288484399838",
"150837434984328378196525896327522819678",
"274434441491179446449130095677034030267",
"265014959100465920608668965175592574325",
"111203493770144942207043686959150281889",
"198533844150030539452969040176518984417"
],
"threshold": 0.9
},
"target": {
"file": "lib/fortify_kunit.c"
},
"id": "CVE-2024-38617-e62ab159",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7880dbf4eafe22a6a41a42e774f1122c814ed02d",
"signature_type": "Line"
}
]