CVE-2024-43871: devres: Fix memory leakage caused by driver API devm_free_percpu()
devres: Fix memory leakage caused by driver API devmfreepercpu()
Other sources
Linux Kernel is vulnerable to a denial of service, caused by a memory leakage when using driver API devmfreepercpu(). By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43871?
CVE-2024-43871 has a severity rating that indicates a risk of memory leakage in the Linux kernel due to improper handling of memory deallocation.
How do I fix CVE-2024-43871?
To fix CVE-2024-43871, ensure that you are using a patched version of the Linux kernel, such as 5.10.226-1, 6.1.123-1, or any later version.
What systems are affected by CVE-2024-43871?
CVE-2024-43871 affects various versions of the Linux kernel including those in the ranges from 4.10 to 6.10.3.
Is there a risk of exploitation for CVE-2024-43871?
Yes, CVE-2024-43871 could potentially be exploited, leading to performance degradation due to memory leakage.
What components does CVE-2024-43871 affect in the Linux kernel?
CVE-2024-43871 affects the driver API specifically related to memory allocation functions, particularly devm_free_percpu() and devm_alloc_percpu().