A memory leak flaw was found in the UBI driver in drivers... · CVE-2024-25740 · GitHub Advisory Database · GitHub

A memory leak flaw was found in the UBI driver in drivers...

Moderate severity Unreviewed Published Feb 12, 2024 to the GitHub Advisory Database • Updated Feb 26, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 for UBI_IOCATT, because kobj->name is not released.

References

Published by the National Vulnerability Database

Feb 12, 2024

Published to the GitHub Advisory Database Feb 12, 2024

Last updated Feb 26, 2024

Severity

Moderate

5.5

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H