Riskcovery

CVE-2024-53077

rpcrdma: Always release the rpcrdma_device's xa_array

State
Published
Severity
5.5 Medium
Published
Nov 19, 2024
Updated
May 11, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rpcrdma: Always release the rpcrdma_device's xa_array

Dai pointed out that the xa_init_flags() in rpcrdma_add_one() needs to have a matching xa_destroy() in rpcrdma_remove_one() to release underlying memory that the xarray might have accrued during operation.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 7e86845a0346efc95fddaa97ce5cd6a8bda8c71c to before 36b7f5a4f300d038270324640ff7c1399245159dAffected
  • 7e86845a0346efc95fddaa97ce5cd6a8bda8c71c to before 63a81588cd2025e75fbaf30b65930b76825c456fAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.11.7 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.