CVE-2024-26655
MEDIUMLinux Kernel 6.7-6.7.11, 6.8-6.8.2 - Use-After-Free in posix_clock_open()
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock. Re-organize the code slightly to make it all more obvious.
References (7)
Core 7
Core References
Scores
CVSS v3
5.5
EPSS
0.0027
EPSS Percentile
17.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-401
Status
published
Products (16)
linux/Kernel
6.7.0 - 6.7.12linux
linux/Kernel
6.8.0 - 6.8.3linux
Linux/Linux
< 6.7
Linux/Linux
221e4d1e29bb442ac4c47bc8ee095abf009ee8f3 - ea2d9bfd422e92fd197f6a0b1fe7d81413b871e0
Linux/Linux
6.7
Linux/Linux
6.7.12 - 6.7.*
Linux/Linux
6.8.3 - 6.8.*
Linux/Linux
6.9
Linux/Linux
60c6946675fc06dd2fd2b7a4b6fd1c1f046f1056 - 0200dd7ed2335469955d7e69cc1a6fa7df1f3847
Linux/Linux
60c6946675fc06dd2fd2b7a4b6fd1c1f046f1056 - 5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8
... and 6 more
Published
Apr 01, 2024
Tracked Since
Feb 18, 2026