Riskcovery

CVE-2024-36954

tipc: fix a possible memleak in tipc_buf_append

State
Published
Severity
Not scored
Published
May 30, 2024
Updated
May 23, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tipc: fix a possible memleak in tipc_buf_append

__skb_linearize() doesn't free the skb when it fails, so move '*buf = NULL' after __skb_linearize(), so that the skb can be freed on the err path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4b1761898861117c97066aea6c58f68a7787f0bf to before 01cd1b7b685751ee422d00d050292a3d277652d6Affected
  • 64d17ec9f1ded042c4b188d15734f33486ed9966 to before 2f87fd9476cf9725d774e6dcb7d17859c6a6d1aeAffected
  • 6da24cfc83ba4f97ea44fc7ae9999a006101755c to before adbce6d20da6254c86425a8d4359b221b5ccbccdAffected
  • b7df21cf1b79ab7026f545e7bf837bd5750ac026 to before 42c8471b0566c7539e7dd584b4d0ebd3cec8cb2cAffected
  • b7df21cf1b79ab7026f545e7bf837bd5750ac026 to before d03a82f4f8144befdc10518e732e2a60b34c870eAffected
  • b7df21cf1b79ab7026f545e7bf837bd5750ac026 to before 614c5a5ae45a921595952117b2e2bd4d4bf9b574Affected
  • b7df21cf1b79ab7026f545e7bf837bd5750ac026 to before 3210d34fda4caff212cb53729e6bd46de604d565Affected
  • b7df21cf1b79ab7026f545e7bf837bd5750ac026 to before 97bf6f81b29a8efaf5d0983251a7450e5794370dAffected
  • b2c8d28c34b3070407cb1741f9ba3f15d0284b8bAffected
  • 5489f30bb78ff0dafb4229a69632afc2ba20765cAffected
  • 436d650d374329a591c30339a91fa5078052ed1eAffected
  • ace300eecbccaa698e2b472843c74a5f33f7dce8Affected
  • 4.19.193 to before 4.19.314Affected
  • 5.4.124 to before 5.4.276Affected
  • 5.10.42 to before 5.10.217Affected
  • 4.4.271 to before 4.5Affected
  • 4.9.271 to before 4.10Affected
  • 4.14.235 to before 4.15Affected
  • 5.12.9 to before 5.13Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 4.19.314 through 4.19.*Not affected
  • 5.4.276 through 5.4.*Not affected
  • 5.10.217 through 5.10.*Not affected
  • 5.15.159 through 5.15.*Not affected
  • 6.1.91 through 6.1.*Not affected
  • 6.6.31 through 6.6.*Not affected
  • 6.8.10 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.