CVE-2024-26734

HIGH

Linux Kernel < 6.6.19 - Memory Leak

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: devlink: fix possible use-after-free and memory leaks in devlink_init() The pernet operations structure for the subsystem must be registered before registering the generic netlink family. Make an unregister in case of unsuccessful registration.

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 3.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-401 CWE-416
Status published

Affected Products (8)

linux/linux_kernel < 6.6.19
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/Kernel < 6.6.19linux
linux/Kernel < 6.7.7linux

Timeline

Published Apr 03, 2024
Tracked Since Feb 18, 2026