Linux Distros Unpatched Vulnerability : CVE-2024-50165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of...

CVE-2024-50165

creationtimestamp| type| source ---|---|--- 2024-11-07 11:07:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113441350552985303 2024-11-07 11:54:32+00:00| seen| https://t.me/cvedetector/10074...

CVE-2024-50165

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of param-string intact so it can be freed later. Otherwise, the kmalloc area pointed to by param-string will be leaked as shown below:...

CVE-2024-50165

CVE-2024-50165 concerns the Linux kernel BPF subsystem. The vulnerability arises in bpf_parse_param() where param->string was not preserved, risking a kmalloc leak if the string is later freed. The fix is to preserve the value of param->string so it can be freed correctly, preventing memory...

CVE-2024-50165 bpf: Preserve param->string when parsing mount options

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of param-string intact so it can be freed later. Otherwise, the kmalloc area pointed to by param-string will be leaked as shown below:...