CVE-2024-39489

ipv6: sr: fix memleak in seg6_hmac_init_algo

State: Published
Severity: Not scored
Published: Jul 10, 2024
Updated: Oct 15, 2026
Reserved: Jun 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: fix memleak in seg6_hmac_init_algo

seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms.

Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bf355b8d2c30a289232042cacc1cfaea4923936c to before afd5730969aec960a2fee4e5ee839a6014643976Affected bf355b8d2c30a289232042cacc1cfaea4923936c to before 4a3fcf53725b70010d1cf869a2ba549fed6b8fb3Affected bf355b8d2c30a289232042cacc1cfaea4923936c to before daf341e0a2318b813427d5a78788c86f4a7f02beAffected bf355b8d2c30a289232042cacc1cfaea4923936c to before 61d31ac85b4572d11f8071855c0ccb4f32d76c0cAffected bf355b8d2c30a289232042cacc1cfaea4923936c to before 599a5654215092ac22bfc453f4fd3959c55ea821Affected bf355b8d2c30a289232042cacc1cfaea4923936c to before 0e44d6cbe8de983470c3d2f978649783384fdcb6Affected bf355b8d2c30a289232042cacc1cfaea4923936c to before f6a99ef4e056c20a138a95cc51332b2b96c8f383Affected bf355b8d2c30a289232042cacc1cfaea4923936c to before efb9f4f19f8e37fde43dfecebc80292d179f56c6Affected
LinuxLinux	4.10Affected before 4.10Not affected 4.19.316 through 4.19.Not affected 5.4.278 through 5.4.Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.9.4 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

bf355b8d2c30a289232042cacc1cfaea4923936c to before afd5730969aec960a2fee4e5ee839a6014643976Affected
bf355b8d2c30a289232042cacc1cfaea4923936c to before 4a3fcf53725b70010d1cf869a2ba549fed6b8fb3Affected
bf355b8d2c30a289232042cacc1cfaea4923936c to before daf341e0a2318b813427d5a78788c86f4a7f02beAffected
bf355b8d2c30a289232042cacc1cfaea4923936c to before 61d31ac85b4572d11f8071855c0ccb4f32d76c0cAffected
bf355b8d2c30a289232042cacc1cfaea4923936c to before 599a5654215092ac22bfc453f4fd3959c55ea821Affected
bf355b8d2c30a289232042cacc1cfaea4923936c to before 0e44d6cbe8de983470c3d2f978649783384fdcb6Affected
bf355b8d2c30a289232042cacc1cfaea4923936c to before f6a99ef4e056c20a138a95cc51332b2b96c8f383Affected
bf355b8d2c30a289232042cacc1cfaea4923936c to before efb9f4f19f8e37fde43dfecebc80292d179f56c6Affected

LinuxLinux

4.10Affected
before 4.10Not affected
4.19.316 through 4.19.*Not affected
5.4.278 through 5.4.*Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.9.4 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.