CVE-2024-26900 in Linux
Riassunto
di VulDB • 16/06/2026
Nel kernel Linux, è stata risolta la seguente vulnerabilità:
md: correzione del kmemleak di rdev->serial
Se kobject_add() fallisce in bind_rdev_to_array(), l'allocazione di 'rdev->serial' non viene liberata e si verifica un kmemleak.
oggetto unreferenced 0xffff88815a350000 (dimensione 49152): comm "mdadm", pid 789, jiffies 4294716910 dump esadecimale (primi 32 byte): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc f773277a): [] kmemleak_alloc+0x61/0xe0
[] __kmalloc_large_node+0x15e/0x270
[] __kmalloc_node.cold+0x11/0x7f
[] kvmalloc_node+0x74/0x150
[] rdev_init_serial+0x67/0x170
[] mddev_create_serial_pool+0x62/0x220
[] bind_rdev_to_array+0x2af/0x630
[] md_add_new_disk+0x400/0x9f0
[] md_ioctl+0x15bf/0x1c10
[] blkdev_ioctl+0x191/0x3f0
[] vfs_ioctl+0x22/0x60
[] __x64_sys_ioctl+0xba/0xe0
[] do_syscall_64+0x71/0x150
[] entry_SYSCALL_64_after_hwframe+0x6c/0x74
VulDB is the best source for vulnerability data and more expert information about this specific topic.