In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: fix krealloc() memory leak
Don't just overwrite the original pointer passed to krealloc()
with its return value without checking latter:
MEM = krealloc(MEM, SZ, GFP);
If krealloc() returns NULL, that erases the pointer
to the still allocated memory, hence leaks this memory.
Instead, use a temporary variable, check it's not NULL
and only then assign it to the original pointer:
TMP = krealloc(MEM, SZ, GFP);
if (!TMP) return;
MEM = TMP;
While on it, use krealloc_array().
CVSS
5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
from 6d45c81d229d71da54d374143e7d6abad4c0cf31 before 30165a09f76eaf34951c818eb5d9d6e4771d76f6; from 6d45c81d229d71da54d374143e7d6abad4c0cf31 before fd87d6966041e33ef7d2e5dc59f9a52b71c6ae5f; from 6d45c81d229d71da54d374143e7d6abad4c0cf31 before e0ce103e89d61eef70edc1d1ae3bfd4c0aacbc2e; from 6d45c81d229d71da54d374143e7d6abad4c0cf31 before c034aa0b1ba5f49cbdf8ef193d6ec714d74aac27; 6d45c81d229d71da54d374143e7d6abad4c0cf31 builds before 02f5e4db57c0cdd7bac89d503b301a093a0fa95c; 6d45c81d229d71da54d374143e7d6abad4c0cf31 builds before 4fc692dc6df5bc777cc1bcebf95179e28594875f; 6d45c81d229d71da54d374143e7d6abad4c0cf31 builds before 5d563a5da8717629ae72f9eadf1e0e340bd1658b
from 4.8 before 5.15.210; from 5.16 before 6.1.176; from 6.2 before 6.6.143; from 6.7 before 6.12.94; from 6.13 before 6.18.36; from 6.19 before 7.0.13; 7.1; 7.1; and 5 more ranges
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
