CVE - CVE-2024-56745

CVE-ID
CVE-2024-56745	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reset_method_store() memory leak In reset_method_store(), a string is allocated via kstrndup() and assigned to the local "options". options is then used in with strsep() to find spaces: while ((name = strsep(&options, " ")) != NULL) { If there are no remaining spaces, then options is set to NULL by strsep(), so the subsequent kfree(options) doesn't free the memory allocated via kstrndup(). Fix by using a separate tmp_options to iterate with strsep() so options is preserved.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2985b1844f3f3447f2d938eff1ef6762592065a5 URL:https://git.kernel.org/stable/c/2985b1844f3f3447f2d938eff1ef6762592065a5 MISC:https://git.kernel.org/stable/c/403efb4457c0c8f8f51e904cc57d39193780c6bd URL:https://git.kernel.org/stable/c/403efb4457c0c8f8f51e904cc57d39193780c6bd MISC:https://git.kernel.org/stable/c/543d0eb40e45c6a51f1bff02f417b602e54472d5 URL:https://git.kernel.org/stable/c/543d0eb40e45c6a51f1bff02f417b602e54472d5 MISC:https://git.kernel.org/stable/c/8e098baf6bc3f3a6aefc383509aba07e202f7ee0 URL:https://git.kernel.org/stable/c/8e098baf6bc3f3a6aefc383509aba07e202f7ee0 MISC:https://git.kernel.org/stable/c/931d07ccffcc3614f20aaf602b31e89754e21c59 URL:https://git.kernel.org/stable/c/931d07ccffcc3614f20aaf602b31e89754e21c59 MISC:https://git.kernel.org/stable/c/fe6fae61f3b993160aef5fe2b7141a83872c144f URL:https://git.kernel.org/stable/c/fe6fae61f3b993160aef5fe2b7141a83872c144f
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)