Linux Distros Unpatched Vulnerability : CVE-2024-50165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of...

CVE-2024-50165

creationtimestamp| type| source ---|---|--- 2024-11-07 11:07:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113441350552985303 2024-11-07 11:54:32+00:00| seen| https://t.me/cvedetector/10074...

CVE-2024-50165

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of param-string intact so it can be freed later. Otherwise, the kmalloc area pointed to by param-string will be leaked as shown below:...

CVE-2024-50165

CVE-2024-50165 is a Linux kernel vulnerability in the bpf_parse_param path (kernel/bpf/inode.c) where param->string was not preserved after parsing mount options, leading to a memory leak in kmem. The 8-byte leak and related stack traces were observed in kmemleak/memdup_user usage. The issue h...

CVE-2024-50165 bpf: Preserve param->string when parsing mount options

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of param-string intact so it can be freed later. Otherwise, the kmalloc area pointed to by param-string will be leaked as shown below:...