NetSight
IP …
medium5.5

CVE-2024-56745

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reset_method_store() memory leak In reset_method_store(), a string is allocated vi…

Impact

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reset_method_store() memory leak In reset_method_store(), a string is allocated via kstrndup() and assigned to the local "options". options is then used in with strsep() to find spaces: while ((name = strsep(&options, " ")) != NULL) { If there are no remaining spaces, then options is set to NULL by strsep(), so the subsequent kfree(options) doesn't free the memory allocated via kstrndup(). Fix by using a separate tmp_options to iterate with strsep() so options is preserved.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.174
from 5.16 before 6.1.120
from 6.2 before 6.6.64
from 6.7 before 6.11.11
from 6.12 before 6.12.2

Weakness classification

CWE-401

References