Azure Linux 3.0 Security Update: kernel (CVE-2024-35972)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35972 advisory. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix possible memory leak in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-35972)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35972 advisory. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix possible memory leak in...

CVE-2024-35972 affecting package kernel for versions less than 6.6.35.1-5

CVE-2024-35972 affecting package kernel for versions less than 6.6.35.1-5. An upgraded version of the package is available that resolves this issue...

CVE-2024-35972 affecting package kernel for versions less than 5.15.158.1-1

CVE-2024-35972 affecting package kernel for versions less than 5.15.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35972

The CVE refers to a Linux kernel memory-leak in bnxt_en during bnxt_rdma_aux_device_init(), triggered when ulp = kzalloc() fails and the edev is not assigned to the cleanup path. The fix assigns the allocated edev immediately after kzalloc(), preventing leaks on error paths. Impact is memory leak...