CVE-2023-54064
In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case.
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function can be called more than once, and it will leak the adapter name if it had already been set. So check for NULL before setting it.
- CVSS
- Not yet scored
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/13623b966bb6d36ba61646b69cd49cdac6e4978a
- https://git.kernel.org/stable/c/3ad53071fe8547eb8d8813971844cc43246008ee
- https://git.kernel.org/stable/c/74a1194cce60a90723d0fe148863c18931a31153
- https://git.kernel.org/stable/c/7db16d2e791bf2ec3e0249f56b7ec81c35bba6e6
- https://git.kernel.org/stable/c/b870caeb18041f856893066ded81c560db3d56cc
- https://git.kernel.org/stable/c/b8d72e32e1453d37ee5c8a219f24e7eeadc471ef
- https://git.kernel.org/stable/c/de677f4379fa67f650e367c188a0f80bee9b6732
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.