Linux Kernel up to 6.1.119/6.6.63/6.11.10/6.12.1 s390 iucv_sock_destruct memory leak

Summaryinfo

A vulnerability was found in Linux Kernel up to 6.1.119/6.6.63/6.11.10/6.12.1. It has been rated as critical. This affects the function iucv_sock_destruct of the component s390. Performing a manipulation results in memory leak. This vulnerability is identified as CVE-2024-53210. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Linux Kernel up to 6.1.119/6.6.63/6.11.10/6.12.1. It has been classified as critical. This affects the function iucv_sock_destruct of the component s390. The manipulation with an unknown input leads to a memory leak vulnerability. CWE is classifying the issue as CWE-401. The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory. This is going to have an impact on availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() Passing MSG_PEEK flag to skb_recv_datagram() increments skb refcount (skb->users) and iucv_sock_recvmsg() does not decrement skb refcount at exit. This results in skb memory leak in skb_queue_purge() and WARN_ON in iucv_sock_destruct() during socket close. To fix this decrease skb refcount by one if MSG_PEEK is set in order to prevent memory leak and WARN_ON. WARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv] CPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G W 6.10.0-rc7 #1 Hardware name: IBM 3931 A01 704 (z/VM 7.3.0) Call Trace: [] iucv_sock_destruct+0x148/0x1a0 [af_iucv] [] iucv_sock_destruct+0x80/0x1a0 [af_iucv] [] __sk_destruct+0x52/0x550 [] __sock_release+0xa4/0x230 [] sock_close+0x2c/0x40 [] __fput+0x2e8/0x970 [] task_work_run+0x1c4/0x2c0 [] do_exit+0x996/0x1050 [] do_group_exit+0x13a/0x360 [] __s390x_sys_exit_group+0x56/0x60 [] do_syscall+0x27a/0x380 [] __do_syscall+0x9c/0x160 [] system_call+0x70/0x98 Last Breaking-Event-Address: [] iucv_sock_destruct+0x84/0x1a0 [af_iucv]

The advisory is shared at git.kernel.org. This vulnerability is uniquely identified as CVE-2024-53210 since 11/19/2024. The exploitability is told to be difficult. Technical details are known, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 214457 (SUSE SLES15 Security Update : kernel (SUSE-SU-2025:0201-1)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 6.1.120, 6.6.64, 6.11.11 or 6.12.2 eliminates this vulnerability. Applying the patch 934326aef7ac4652f81c69d18bf44eebaefc39c3/42251c2d1ef1cb0822638bebb87ad9120c759673/783c2c6e61c5a04eb8baea598753d5fa174dbe85/9f603e66e1c59c1d25e60eb0636cb307d190782e/ebaf81317e42aa990ad20b113cfe3a7b20d4e937 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (214457) and CERT Bund (WID-SEC-2024-3762). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• Debian Linux
• Amazon Linux 2
• Red Hat Enterprise Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• RESF Rocky Linux
• Dell NetWorker
• Dell Avamar
• Red Hat OpenShift
• IBM QRadar SIEM
• Dell PowerProtect Data Domain
• Open Source Linux Kernel
• IBM DataPower Gateway
• Dell Secure Connect Gateway

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 6.1.119
• 6.6.0
• 6.6.1
• 6.6.2
• 6.6.3
• 6.6.4
• 6.6.5
• 6.6.6
• 6.6.7
• 6.6.8
• 6.6.9
• 6.6.10
• 6.6.11
• 6.6.12
• 6.6.13
• 6.6.14
• 6.6.15
• 6.6.16
• 6.6.17
• 6.6.18
• 6.6.19
• 6.6.20
• 6.6.21
• 6.6.22
• 6.6.23
• 6.6.24
• 6.6.25
• 6.6.26
• 6.6.27
• 6.6.28
• 6.6.29
• 6.6.30
• 6.6.31
• 6.6.32
• 6.6.33
• 6.6.34
• 6.6.35
• 6.6.36
• 6.6.37
• 6.6.38
• 6.6.39
• 6.6.40
• 6.6.41
• 6.6.42
• 6.6.43
• 6.6.44
• 6.6.45
• 6.6.46
• 6.6.47
• 6.6.48
• 6.6.49
• 6.6.50
• 6.6.51
• 6.6.52
• 6.6.53
• 6.6.54
• 6.6.55
• 6.6.56
• 6.6.57
• 6.6.58
• 6.6.59
• 6.6.60
• 6.6.61
• 6.6.62
• 6.6.63
• 6.11.0
• 6.11.1
• 6.11.2
• 6.11.3
• 6.11.4
• 6.11.5
• 6.11.6
• 6.11.7
• 6.11.8
• 6.11.9
• 6.11.10
• 6.12.0
• 6.12.1

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion