CVE-2024-35972
MEDIUMLinux Kernel < 5.10.216 - Memory Leak
Title source: ruleDescription
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() If ulp = kzalloc() fails, the allocated edev will leak because it is not properly assigned and the cleanup path will not be able to free it. Fix it by assigning it properly immediately after allocation.
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
0.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-401
Status
published
Affected Products (3)
linux/linux_kernel
< 5.10.216
linux/Kernel
< 6.6.28linux
linux/Kernel
< 6.8.7linux
Timeline
Published
May 20, 2024
Tracked Since
Feb 18, 2026