CVE-2024-26655

Summary

In the Linux kernel, the following vulnerability has been resolved:

Fix memory leak in posix_clock_open()

If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock.

Re-organize the code slightly to make it all more obvious.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux63cb05f600940a3b4824509e7e0e909f040c82ee < f845cfa1a5ae697782bfcb843c9d06d3bc0cbbb6affected
LinuxLinuxa006fc4485159dc9bc3c4156f433f62b9c2b709c < 62a5adf57b56ee94075c889abea518b9dc66895daffected
LinuxLinux72ba2204a2a71b6f25873f20eb9329e1e7a01d03 < 375abf52353ca5e1a2e5f763629a870f91d0c38aaffected
LinuxLinux221e4d1e29bb442ac4c47bc8ee095abf009ee8f3 < ea2d9bfd422e92fd197f6a0b1fe7d81413b871e0affected
LinuxLinux60c6946675fc06dd2fd2b7a4b6fd1c1f046f1056 < a88649b49523e8cbe95254440d803e38c19d2341affected
LinuxLinux60c6946675fc06dd2fd2b7a4b6fd1c1f046f1056 < 0200dd7ed2335469955d7e69cc1a6fa7df1f3847affected
LinuxLinux60c6946675fc06dd2fd2b7a4b6fd1c1f046f1056 < 5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8affected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.7.12 <= 6.7.*unaffected
LinuxLinux6.8.3 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References