CVE-2024-38617

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-38617
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38617.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-38617
Downstream
Related
Published
2024-06-19T13:56:16Z
Modified
2025-10-21T22:53:29.932244Z
Summary
kunit/fortify: Fix mismatched kvalloc()/vfree() usage
Details

In the Linux kernel, the following vulnerability has been resolved:

kunit/fortify: Fix mismatched kvalloc()/vfree() usage

The kv*() family of tests were accidentally freeing with vfree() instead of kvfree(). Use kvfree() instead.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9124a26401483bf2b13a99cb4317dce3f677060f
Fixed
7880dbf4eafe22a6a41a42e774f1122c814ed02d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9124a26401483bf2b13a99cb4317dce3f677060f
Fixed
42d21c9727028fe7ee392223ba127484b1b8677e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9124a26401483bf2b13a99cb4317dce3f677060f
Fixed
03758d5a0932016b6d5f5bfbca580177e6bc937a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9124a26401483bf2b13a99cb4317dce3f677060f
Fixed
998b18072ceb0613629c256b409f4d299829c7ec

Affected versions

v6.*

v6.1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.10
v6.8.11
v6.8.2
v6.8.3
v6.8.4
v6.8.5
v6.8.6
v6.8.7
v6.8.8
v6.8.9
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2

Database specific

vanir_signatures

[
    {
        "digest": {
            "line_hashes": [
                "167543584095237390722757574329838801005",
                "9913561776851120403732489234184376760",
                "596459028848294784390410991726643264",
                "20916218915809960938870402545260386579",
                "258267901529733811284677144012454927565",
                "2207002598823217822821970953346273477",
                "85223425848276208290297860512811490213",
                "265921132853882901446634652674338049614",
                "214281389530463960254193039373650975832",
                "23429364366431508284723481961355005846",
                "60658837780277584188269530258552126146",
                "71149116640702609940694752204629713210",
                "325223442639789769443435642602598640168",
                "117746956106852037424547254903622019577",
                "222213190337357645406276963140046723874",
                "138773972536812843333579000084093121797",
                "324330602927968632989879941316317192930",
                "78569389024843444745635784004122135805",
                "170658827538874299797826882346383563426",
                "103732031364408011376912279288484399838",
                "150837434984328378196525896327522819678",
                "274434441491179446449130095677034030267",
                "265014959100465920608668965175592574325",
                "111203493770144942207043686959150281889",
                "198533844150030539452969040176518984417"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "lib/fortify_kunit.c"
        },
        "signature_type": "Line",
        "id": "CVE-2024-38617-01349b55",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@998b18072ceb0613629c256b409f4d299829c7ec"
    },
    {
        "digest": {
            "line_hashes": [
                "167543584095237390722757574329838801005",
                "9913561776851120403732489234184376760",
                "596459028848294784390410991726643264",
                "20916218915809960938870402545260386579",
                "258267901529733811284677144012454927565",
                "2207002598823217822821970953346273477",
                "85223425848276208290297860512811490213",
                "265921132853882901446634652674338049614",
                "214281389530463960254193039373650975832",
                "23429364366431508284723481961355005846",
                "60658837780277584188269530258552126146",
                "71149116640702609940694752204629713210",
                "325223442639789769443435642602598640168",
                "117746956106852037424547254903622019577",
                "222213190337357645406276963140046723874",
                "138773972536812843333579000084093121797",
                "324330602927968632989879941316317192930",
                "78569389024843444745635784004122135805",
                "170658827538874299797826882346383563426",
                "103732031364408011376912279288484399838",
                "150837434984328378196525896327522819678",
                "274434441491179446449130095677034030267",
                "265014959100465920608668965175592574325",
                "111203493770144942207043686959150281889",
                "198533844150030539452969040176518984417"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "lib/fortify_kunit.c"
        },
        "signature_type": "Line",
        "id": "CVE-2024-38617-5945cbfe",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03758d5a0932016b6d5f5bfbca580177e6bc937a"
    },
    {
        "digest": {
            "line_hashes": [
                "167543584095237390722757574329838801005",
                "9913561776851120403732489234184376760",
                "596459028848294784390410991726643264",
                "20916218915809960938870402545260386579",
                "258267901529733811284677144012454927565",
                "2207002598823217822821970953346273477",
                "85223425848276208290297860512811490213",
                "265921132853882901446634652674338049614",
                "214281389530463960254193039373650975832",
                "23429364366431508284723481961355005846",
                "60658837780277584188269530258552126146",
                "71149116640702609940694752204629713210",
                "325223442639789769443435642602598640168",
                "117746956106852037424547254903622019577",
                "222213190337357645406276963140046723874",
                "138773972536812843333579000084093121797",
                "324330602927968632989879941316317192930",
                "78569389024843444745635784004122135805",
                "170658827538874299797826882346383563426",
                "103732031364408011376912279288484399838",
                "150837434984328378196525896327522819678",
                "274434441491179446449130095677034030267",
                "265014959100465920608668965175592574325",
                "111203493770144942207043686959150281889",
                "198533844150030539452969040176518984417"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "lib/fortify_kunit.c"
        },
        "signature_type": "Line",
        "id": "CVE-2024-38617-94152c11",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42d21c9727028fe7ee392223ba127484b1b8677e"
    },
    {
        "digest": {
            "line_hashes": [
                "167543584095237390722757574329838801005",
                "9913561776851120403732489234184376760",
                "596459028848294784390410991726643264",
                "20916218915809960938870402545260386579",
                "258267901529733811284677144012454927565",
                "2207002598823217822821970953346273477",
                "85223425848276208290297860512811490213",
                "265921132853882901446634652674338049614",
                "214281389530463960254193039373650975832",
                "23429364366431508284723481961355005846",
                "60658837780277584188269530258552126146",
                "71149116640702609940694752204629713210",
                "325223442639789769443435642602598640168",
                "117746956106852037424547254903622019577",
                "222213190337357645406276963140046723874",
                "138773972536812843333579000084093121797",
                "324330602927968632989879941316317192930",
                "78569389024843444745635784004122135805",
                "170658827538874299797826882346383563426",
                "103732031364408011376912279288484399838",
                "150837434984328378196525896327522819678",
                "274434441491179446449130095677034030267",
                "265014959100465920608668965175592574325",
                "111203493770144942207043686959150281889",
                "198533844150030539452969040176518984417"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "lib/fortify_kunit.c"
        },
        "signature_type": "Line",
        "id": "CVE-2024-38617-e62ab159",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7880dbf4eafe22a6a41a42e774f1122c814ed02d"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.33
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.12
Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.9.3