Riskcovery

CVE-2024-26734

devlink: fix possible use-after-free and memory leaks in devlink_init()

State
Published
Severity
7.0 High
Published
Apr 3, 2024
Updated
Aug 5, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

devlink: fix possible use-after-free and memory leaks in devlink_init()

The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

Make an unregister in case of unsuccessful registration.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 687125b5799cd5120437fa455cfccbe8537916ff to before 919092bd5482b7070ae66d1daef73b600738f3a2Affected
  • 687125b5799cd5120437fa455cfccbe8537916ff to before e91d3561e28d7665f4f837880501dc8755f635a9Affected
  • 687125b5799cd5120437fa455cfccbe8537916ff to before def689fc26b9a9622d2e2cb0c4933dd3b1c8071cAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.19 through 6.6.*Not affected
  • 6.7.7 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.