Riskcovery

CVE-2024-56742

vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

State
Published
Severity
3.3 Low
Published
Dec 29, 2024
Updated
Oct 30, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

Fix an unwind issue in mlx5vf_add_migration_pages().

If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak.

Any pages successfully added to the SG table will be freed as part of mlx5vf_free_data_buffer().

Scores

CVSSScoreVectorSource
3.13.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before 549384162ed7e84bdefa004b589215d18b0190c5Affected
  • 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before 465e06ffbb681f6fe34ca3aeba4b609677c3d4c1Affected
  • 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before 769fe4ce444b646b0bf6ac308de80686c730c7dfAffected
  • 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before c44f1b2ddfa81c8d7f8e9b6bc76c427bc00e69d5Affected
  • 6fadb021266d03c5fd7bca2cfa1607efd246dad1 to before 22e87bf3f77c18f5982c19ffe2732ef0c7a25f16Affected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.