Riskcovery

CVE-2024-47677

exfat: resolve memory leak from exfat_create_upcase_table()

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Sep 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

exfat: resolve memory leak from exfat_create_upcase_table()

If exfat_load_upcase_table reaches end and returns -EINVAL, allocated memory doesn't get freed and while exfat_load_default_upcase_table allocates more memory, leading to a memory leak.

Here's link to syzkaller crash report illustrating this issue: https://syzkaller.appspot.com/text?tag=CrashReport&x=1406c201980000

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a13d1a4de3b0fe3c41d818697d691c886c5585fa to before f9835aec49670c46ebe2973032caaa1043b3d4daAffected
  • a13d1a4de3b0fe3c41d818697d691c886c5585fa to before 331ed2c739ce656a67865f6b3ee0a478349d78cbAffected
  • a13d1a4de3b0fe3c41d818697d691c886c5585fa to before c290fe508eee36df1640c3cb35dc8f89e073c8a8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.10.13 through 6.10.*Not affected
  • 6.11.2 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.