VulnerabilityAnalyzed
CVE-2024-26655
In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock.
MEDIUM 5.5EPSS 0.26%
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock. Re-organize the code slightly to make it all more obvious.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.26% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847Patch
- https://git.kernel.org/stable/c/375abf52353ca5e1a2e5f763629a870f91d0c38aPatch
- https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8Patch
- https://git.kernel.org/stable/c/62a5adf57b56ee94075c889abea518b9dc66895dPatch
- https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341Patch
- https://git.kernel.org/stable/c/ea2d9bfd422e92fd197f6a0b1fe7d81413b871e0Patch
- https://git.kernel.org/stable/c/f845cfa1a5ae697782bfcb843c9d06d3bc0cbbb6Patch
- https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847Patch
- https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8Patch
- https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.