CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route()
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix neighbour and rtable leak in smcibfindroute()
In smcibfindroute(), the neighbour found by neighlookup() and rtable resolved by iprouteoutputflow() are not released or put before return. It may cause the refcount leak, so fix it.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix neighbour and rtable leak in smcibfindroute()
The Linux kernel CVE team has assigned CVE-2024-36945 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053039-CVE-2024-36945-18ae@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36945?
CVE-2024-36945 is classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-36945?
To fix CVE-2024-36945, upgrade to the latest kernel versions provided in the affected software lists.
Which versions of the Linux kernel are affected by CVE-2024-36945?
CVE-2024-36945 affects several kernel versions, including those prior to 6.1.91, 6.6.31, 6.8.10, and 6.9.
What is the impact of not addressing CVE-2024-36945?
Failure to address CVE-2024-36945 may lead to potential memory leaks in the system affecting stability and performance.
Is there a specific configuration required to mitigate CVE-2024-36945?
No specific configuration is required; simply updating to a remedied kernel version will mitigate CVE-2024-36945.