dm-integrity: fix a memory leak when rechecking the data
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a memory leak when rechecking the data Memory for the "checksums" pointer will leak if the data is rechecked after checksum failure (because the associated kfree won't happen due to 'goto skip_io'). Fix this by freeing the checksums memory before recheck, and just use the "checksum_onstack" memory for storing checksum during recheck.
02 / AFFECTED SOFTWARE
Affected packages
11 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a memory leak when rechecking the data Memory for the "checksums" pointer will leak if the data is rechecked after checksum failure (because the associated kfree won't happen due to 'goto skip_io'). Fix this by freeing the checksums memory before recheck, and just use the "checksum_onstack" memory for storing checksum during recheck.
05 / REFERENCES
Further evidence
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/20e21c3c0195d915f33bc7321ee6b362177bf5bf
- https://git.kernel.org/stable/c/338580a7fb9b0930bb38098007e89cc0fc496bf7
- https://git.kernel.org/stable/c/55e565c42dce81a4e49c13262d5bc4eb4c2e588a
- https://git.kernel.org/stable/c/6d35654f03c35c273240d85ec67e3f2c3596c4e0
- https://git.kernel.org/stable/c/74abc2fe09691f3d836d8a54d599ca71f1e4287b
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26860.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-26860