| { |
| "containers": { |
| "cna": { |
| "providerMetadata": { |
| "orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038" |
| }, |
| "descriptions": [ |
| { |
| "lang": "en", |
| "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix a possible memleak in tipc_buf_append\n\n__skb_linearize() doesn't free the skb when it fails, so move\n'*buf = NULL' after __skb_linearize(), so that the skb can be\nfreed on the err path." |
| } |
| ], |
| "affected": [ |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "unaffected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "net/tipc/msg.c" |
| ], |
| "versions": [ |
| { |
| "version": "4b1761898861117c97066aea6c58f68a7787f0bf", |
| "lessThan": "01cd1b7b685751ee422d00d050292a3d277652d6", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "64d17ec9f1ded042c4b188d15734f33486ed9966", |
| "lessThan": "2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "6da24cfc83ba4f97ea44fc7ae9999a006101755c", |
| "lessThan": "adbce6d20da6254c86425a8d4359b221b5ccbccd", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "b7df21cf1b79ab7026f545e7bf837bd5750ac026", |
| "lessThan": "42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "b7df21cf1b79ab7026f545e7bf837bd5750ac026", |
| "lessThan": "d03a82f4f8144befdc10518e732e2a60b34c870e", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "b7df21cf1b79ab7026f545e7bf837bd5750ac026", |
| "lessThan": "614c5a5ae45a921595952117b2e2bd4d4bf9b574", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "b7df21cf1b79ab7026f545e7bf837bd5750ac026", |
| "lessThan": "3210d34fda4caff212cb53729e6bd46de604d565", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "b7df21cf1b79ab7026f545e7bf837bd5750ac026", |
| "lessThan": "97bf6f81b29a8efaf5d0983251a7450e5794370d", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "b2c8d28c34b3070407cb1741f9ba3f15d0284b8b", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "5489f30bb78ff0dafb4229a69632afc2ba20765c", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "436d650d374329a591c30339a91fa5078052ed1e", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "ace300eecbccaa698e2b472843c74a5f33f7dce8", |
| "status": "affected", |
| "versionType": "git" |
| } |
| ] |
| }, |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "affected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "net/tipc/msg.c" |
| ], |
| "versions": [ |
| { |
| "version": "5.13", |
| "status": "affected" |
| }, |
| { |
| "version": "0", |
| "lessThan": "5.13", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "4.19.314", |
| "lessThanOrEqual": "4.19.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.4.276", |
| "lessThanOrEqual": "5.4.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.10.217", |
| "lessThanOrEqual": "5.10.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.15.159", |
| "lessThanOrEqual": "5.15.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.1.91", |
| "lessThanOrEqual": "6.1.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.6.31", |
| "lessThanOrEqual": "6.6.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.8.10", |
| "lessThanOrEqual": "6.8.*", |
| "status": "unaffected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.9", |
| "lessThanOrEqual": "*", |
| "status": "unaffected", |
| "versionType": "original_commit_for_fix" |
| } |
| ] |
| } |
| ], |
| "cpeApplicability": [ |
| { |
| "nodes": [ |
| { |
| "operator": "OR", |
| "negate": false, |
| "cpeMatch": [ |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "4.19.193", |
| "versionEndExcluding": "4.19.314" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.4.124", |
| "versionEndExcluding": "5.4.276" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.10.42", |
| "versionEndExcluding": "5.10.217" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.13", |
| "versionEndExcluding": "5.15.159" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.13", |
| "versionEndExcluding": "6.1.91" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.13", |
| "versionEndExcluding": "6.6.31" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.13", |
| "versionEndExcluding": "6.8.10" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.13", |
| "versionEndExcluding": "6.9" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "4.4.271" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "4.9.271" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "4.14.235" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.12.9" |
| } |
| ] |
| } |
| ] |
| } |
| ], |
| "references": [ |
| { |
| "url": "https://git.kernel.org/stable/c/01cd1b7b685751ee422d00d050292a3d277652d6" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/2f87fd9476cf9725d774e6dcb7d17859c6a6d1ae" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/adbce6d20da6254c86425a8d4359b221b5ccbccd" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/42c8471b0566c7539e7dd584b4d0ebd3cec8cb2c" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/d03a82f4f8144befdc10518e732e2a60b34c870e" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/614c5a5ae45a921595952117b2e2bd4d4bf9b574" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/3210d34fda4caff212cb53729e6bd46de604d565" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/97bf6f81b29a8efaf5d0983251a7450e5794370d" |
| } |
| ], |
| "title": "tipc: fix a possible memleak in tipc_buf_append", |
| "x_generator": { |
| "engine": "bippy-1.2.0" |
| } |
| } |
| }, |
| "cveMetadata": { |
| "assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038", |
| "cveID": "CVE-2024-36954", |
| "requesterUserId": "gregkh@kernel.org", |
| "serial": "1", |
| "state": "PUBLISHED" |
| }, |
| "dataType": "CVE_RECORD", |
| "dataVersion": "5.0" |
| } |
