CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init()
Description
In the Linux kernel, the following vulnerability has been resolved:
devlink: fix possible use-after-free and memory leaks in devlink_init()
The pernet operations structure for the subsystem must be registered
before registering the generic netlink family.
Make an unregister in case of unsuccessful registration.
Classification
CVE ID: CVE-2024-26734
Affected Products
Vendor: Linux
Product: Linux
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 5.08% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)
References
https://git.kernel.org/stable/c/919092bd5482b7070ae66d1daef73b600738f3a2https://git.kernel.org/stable/c/e91d3561e28d7665f4f837880501dc8755f635a9
https://git.kernel.org/stable/c/def689fc26b9a9622d2e2cb0c4933dd3b1c8071c