Description
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrl_cmd_bye() A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But currently, the nameserver doesn't free the node memory even after processing the BYE packet. This causes the node memory to leak. Hence, remove the node from Xarray list and free the node memory during both success and failure case of ctrl_cmd_bye().
References (8)
Core 8
Core References
Scores
CVSS v3
5.5
EPSS
0.0012
EPSS Percentile
2.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (27)
linux/Kernel
5.11.0 - 5.15.210linux
linux/Kernel
5.16.0 - 6.1.176linux
linux/Kernel
5.7.0 - 5.10.259linux
linux/Kernel
6.13.0 - 6.18.27linux
linux/Kernel
6.19.0 - 7.0.4linux
linux/Kernel
6.2.0 - 6.6.140linux
linux/Kernel
6.7.0 - 6.12.86linux
Linux/Linux
< 5.7
Linux/Linux
0c2204a4ad710d95d348ea006f14ba926e842ffd - 076e4b162d6caba12c229e7f262df5b6881162b0
Linux/Linux
0c2204a4ad710d95d348ea006f14ba926e842ffd - 154fc7fe3f62c46891c3c4302f4b5b5391c932e6
... and 17 more
Published
May 27, 2026
Tracked Since
May 27, 2026