CVE-2024-26839

IB/hfi1: Fix a memleak in init_credit_return

MEDIUM

5.5

CVSS Score

Published: April 17, 2024 at 10:10 AM UTC

Updated: June 17, 2026 at 07:18 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in init_credit_return When dma_alloc_coherent fails to allocate dd->cr_base[i].va, init_credit_return should deallocate dd->cr_base and dd->cr_base[i] that allocated before. Or those resources would be never freed and a memleak is triggered.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0

Linux Kernel · Linux

95%

4.20 ≤ v < 5.4.2704.3 ≤ v < 4.19.3084.3 ≤ v < 5.10.2114.3 ≤ v < 5.15.1504.3 ≤ v < 5.4.2704.3 ≤ v < 6.1.804.3 ≤ v < 6.6.194.3 ≤ v < 6.7.74.3 ≤ v < 6.85.11 ≤ v < 5.15.1505.16 ≤ v < 6.1.805.5 ≤ v < 5.10.2116.2 ≤ v < 6.6.196.7 ≤ v < 6.7.76.8 rc1 6.8 rc2 6.8 rc3 6.8 rc4 6.8 rc57724105686e718ac476a6ad3304fea2fbcfcffde

Vendor states this is fixed in 2e4f9f20b32658ef3724aa46f7aef4908d2609e3 (fixed)

Vendor states this is fixed in 3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7 (fixed)

Vendor states this is fixed in 52de5805c147137205662af89ed7e083d656ae25 (fixed)

Vendor states this is fixed in 809aa64ebff51eb170ee31a95f83b2d21efa32e2 (fixed)

Vendor states this is fixed in 8412c86e89cc78d8b513cb25cf2157a2adf3670a (fixed)

Vendor states this is fixed in b41d0ade0398007fb746213f09903d52a920e896 (fixed)

Vendor states this is fixed in cecfb90cf71d91e9efebd68b9e9b84661b277cc8 (fixed)

Vendor states this is fixed in f0d857ce31a6bc7a82afcdbadb8f7417d482604b (fixed)

Vendor states this is fixed in 4.19.308 (unaffected)

Vendor states this is fixed in 4.3 (unaffected)

Vendor states this is fixed in 5.10.211 (unaffected)

Vendor states this is fixed in 5.15.150 (unaffected)