Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() If ulp = kzalloc() fails, the allocated edev will leak because it is not properly assigned and the cleanup path will not be able to free it. Fix it by assigning it properly immediately after allocation.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.5, < 5.10.216 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/10a9d6a7513f93d7faffcb341af0aa42be8218fePatch
- https://git.kernel.org/stable/c/7ac10c7d728d75bc9daaa8fade3c7a3273b9a9ffPatch
- https://git.kernel.org/stable/c/c60ed825530b8c0cc2b524efd39b1d696ec54004Patch
- https://git.kernel.org/stable/c/10a9d6a7513f93d7faffcb341af0aa42be8218fePatch
- https://git.kernel.org/stable/c/7ac10c7d728d75bc9daaa8fade3c7a3273b9a9ffPatch
- https://git.kernel.org/stable/c/c60ed825530b8c0cc2b524efd39b1d696ec54004Patch
FAQ
What is CVE-2024-35972?
CVE-2024-35972 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() If ulp = kzalloc() fails, the allocated edev will leak because it...
How severe is CVE-2024-35972?
CVE-2024-35972 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-35972?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.