CVE-2024-26860 dm-integrity: fix a memory leak when rechecking the data

2024-04-1710:27:24

Linux

www.cve.org

linux kernel

vulnerability resolved

dm-integrity

memory leak

checksums

recheck

cve-2024-26860

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: fix a memory leak when rechecking the data

Memory for the “checksums” pointer will leak if the data is rechecked
after checksum failure (because the associated kfree won’t happen due
to ‘goto skip_io’).

Fix this by freeing the checksums memory before recheck, and just use
the “checksum_onstack” memory for storing checksum during recheck.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/md/dm-integrity.c"
    ],
    "versions": [
      {
        "version": "906414f45964",
        "lessThan": "20e21c3c0195",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d6824a28b244",
        "lessThan": "338580a7fb9b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "eb7b14a6a923",
        "lessThan": "74abc2fe0969",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c88f5e553fe3",
        "lessThan": "6d35654f03c3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c88f5e553fe3",
        "lessThan": "55e565c42dce",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/md/dm-integrity.c"
    ],
    "versions": [
      {
        "version": "6.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.8",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.83",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.23",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.11",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.2",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]