init_on_free
is set, slab_free_hook() zeroes the object.slub_debug=F
and CONFIG_SLAB_FREELIST_HARDENED
areinit_on_free
.init_on_free
is set. The freepointer leftslub_debug=FU init_on_free=1 log_level=7
on theCONFIG_SLAB_FREELIST_HARDENED=y
.[ 10.712695]
[ 10.712695] Slab 0xffffd8bdc400d580 objects=32 used=4
fp=0xffff9d9a80356f80
flags=0x200000000000a00(workingset|slab|node=0|zone=2)
[ 10.716698] Object 0xffff9d9a80356600 @offset=1536 fp=0x7ee4f480ce0ecd7c
[ 10.716698]
[ 10.716698] Bytes b4 ffff9d9a803565f0: 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 …
[ 10.720703] Object ffff9d9a80356600: 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 …
[ 10.720703] Object ffff9d9a80356610: 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 …
[ 10.724696] Padding ffff9d9a8035666c: 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 …
[ 10.724696] Padding ffff9d9a8035667c: 00 00 00 00
…
[ 10.724696] FIX kmalloc-rnd-05-32: Object at 0xffff9d9a80356600 not
freed
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 24.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-azure | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-gcp | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-gke | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-ibm | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-intel | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-lowlatency | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-nvidia | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-oem-6.8 | < any | UNKNOWN |
git.kernel.org/linus/8f828aa48812ced28aa39cb3cfe55ef2444d03dd (6.9)
git.kernel.org/stable/c/56900355485f6e82114b18c812edd57fd7970dcb
git.kernel.org/stable/c/8f828aa48812ced28aa39cb3cfe55ef2444d03dd
launchpad.net/bugs/cve/CVE-2024-36892
nvd.nist.gov/vuln/detail/CVE-2024-36892
security-tracker.debian.org/tracker/CVE-2024-36892
www.cve.org/CVERecord?id=CVE-2024-36892