CVE-2024-38617

Published: Jun 19, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: kunit/fortify: Fix mismatched kvalloc()/vfree() usage The kv*() family of tests were accidentally freeing with vfree() instead of kvfree(). Use kvfree() instead.

Affected (3)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 6.2 to 6.6.33
Linux Linux Kernel	From 6.7 to 6.8.12
Linux Linux Kernel	From 6.9 to 6.9.3

Related CWEs

CWE-763

Release of Invalid Pointer or Reference

The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

References (8)

https://git.kernel.org/stable/c/03758d5a0932016b6d5f5bfbca580177e6bc937a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/42d21c9727028fe7ee392223ba127484b1b8677e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/7880dbf4eafe22a6a41a42e774f1122c814ed02d

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/998b18072ceb0613629c256b409f4d299829c7ec

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/03758d5a0932016b6d5f5bfbca580177e6bc937a

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/42d21c9727028fe7ee392223ba127484b1b8677e

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/7880dbf4eafe22a6a41a42e774f1122c814ed02d

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/998b18072ceb0613629c256b409f4d299829c7ec

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.