In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: fix some memleaks in gssxdecoption_array
The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths.
[
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-02c91152",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-25f8e2d3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@996997d1fb2126feda550d6adcedcbd94911fc69",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-28b5ed4b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd292e884c649f9b1c18af0ec75ca90b390cd044",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-33c8930d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b97c37978ca825557d331c9012e0c1ddc0e42364",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-47fdc85b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-61ed1640",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3cfcfc102a5e57b021b786a755a38935e357797d",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-7eb05be9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@934212a623cbab851848b6de377eb476718c3e4c",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-83054f59",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd292e884c649f9b1c18af0ec75ca90b390cd044",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-96874c82",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6013ae2c8d420faea553d363935f65badd32c3",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-9fa6451b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e6013ae2c8d420faea553d363935f65badd32c3",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-a11a7076",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-aaf926ac",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@996997d1fb2126feda550d6adcedcbd94911fc69",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-aba2ac39",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-b1fdd455",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-b515bf26",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@934212a623cbab851848b6de377eb476718c3e4c",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-cfba5c19",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3cfcfc102a5e57b021b786a755a38935e357797d",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"128081901011701060435733403664936882693",
"152137831088165538352167106168922611919",
"244071397997532735808259510581116099972",
"292122691304878270315422267866088250621",
"133829085891992900201919729608402764866",
"53463134706408696019665367490164665964",
"307369501254832014862041857891305785434",
"198461798559084375656755881713643900146",
"228221277219793581335144993975931143477",
"224683762505195976626145687131820567227",
"158430306003825096835499008026675252300",
"194386898212903176165656606878654144806",
"206383782744149371141813408338271533010",
"121018299706157361961163099530895802358",
"179855255987269473397590092458124874878",
"162197599245962123865731094683945923516",
"266355261116396091643113743716521389032",
"131375799852522786251400717644515668824",
"65539686216737468350352837724406637718",
"219912886920511355081665613425558261239",
"306658726642193280479259397417231100359",
"340002067868581073656752521153656872541",
"78828392896317485488953111243907561258",
"22442300463467650316698611349993398415",
"267868390585593816517915983992887850017",
"218364923534138741765950774869176725124",
"146129560067601787521611981106638279617"
],
"threshold": 0.9
},
"target": {
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-e74832bd",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4",
"deprecated": false
},
{
"digest": {
"function_hash": "29723901995212074181389562988528957883",
"length": 1245.0
},
"target": {
"function": "gssx_dec_option_array",
"file": "net/sunrpc/auth_gss/gss_rpc_xdr.c"
},
"id": "CVE-2024-27388-f91384d9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b97c37978ca825557d331c9012e0c1ddc0e42364",
"deprecated": false
}
]