CVE-2024-26900 in Linux
Sumário
de VulDB • 06/06/2026
No kernel Linux, a seguinte vulnerabilidade foi corrigida:
md: correção do kmemleak em rdev->serial
Se o kobject_add() falhar no bind_rdev_to_array(), 'rdev->serial' será alocado mas não liberado, causando um erro de kmemleak.
objeto sem referência 0xffff88815a350000 (tamanho 49152): comm "mdadm", pid 789, jiffies 4294716910 dump hexadecimal (primeiros 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc f773277a): [] kmemleak_alloc+0x61/0xe0
[] __kmalloc_large_node+0x15e/0x270
[] __kmalloc_node.cold+0x11/0x7f
[] kvmalloc_node+0x74/0x150
[] rdev_init_serial+0x67/0x170
[] mddev_create_serial_pool+0x62/0x220
[] bind_rdev_to_array+0x2af/0x630
[] md_add_new_disk+0x400/0x9f0
[] md_ioctl+0x15bf/0x1c10
[] blkdev_ioctl+0x191/0x3f0
[] vfs_ioctl+0x22/0x60
[] __x64_sys_ioctl+0xba/0xe0
[] do_syscall_64+0x71/0x150
[] entry_SYSCALL_64_after_hwframe+0x6c/0x74
Be aware that VulDB is the high quality source for vulnerability data.