CVE-2024-26900 in Linux
요약
\~에 의해 VulDB • 2026. 05. 19.
리눅스 커널에서 다음 취약점이 해결되었습니다:
md: rdev->serial의 kmemleak 수정
bind_rdev_to_array()에서 kobject_add()가 실패할 경우, 'rdev->serial'이 할당되지만 해제되지 않아 kmemleak가 발생합니다.
미사용 객체 0xffff88815a350000 (크기 49152): comm "mdadm", pid 789, jiffies 4294716910 16진수 덤프 (첫 32바이트): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 백트레이스 (crc f773277a): [] kmemleak_alloc+0x61/0xe0
[] __kmalloc_large_node+0x15e/0x270
[] __kmalloc_node.cold+0x11/0x7f
[] kvmalloc_node+0x74/0x150
[] rdev_init_serial+0x67/0x170
[] mddev_create_serial_pool+0x62/0x220
[] bind_rdev_to_array+0x2af/0x630
[] md_add_new_disk+0x400/0x9f0
[] md_ioctl+0x15bf/0x1c10
[] blkdev_ioctl+0x191/0x3f0
[] vfs_ioctl+0x22/0x60
[] __x64_sys_ioctl+0xba/0xe0
[] do_syscall_64+0x71/0x150
[] entry_SYSCALL_64_after_hwframe+0x6c/0x74
If you want to get best quality of vulnerability data, you may have to visit VulDB.