CVE-2024-38632

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: fix potential memory leak in vfio_intx_enable()

If vfio_irq_ctx_alloc() failed will lead to 'name' memory leak.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 4cb0d7532126d23145329826c38054b4e9a05e7c, < a6d810554d7d9d07041f14c5fcd453f3d3fed594; >= 7d29d4c72c1e196cce6969c98072a272d1a703b3, < 91ced077db2062604ec270b1046f8337e9090079; >= 69276a555c740acfbff13fb5769ee9c92e1c828e, < 0bd22a4966d55f1d2c127a53300d5c2b50152376; >= 18c198c96a815c962adc2b9b77909eec0be7df4d, < 35fef97c33f3d3ca0455f9a8e2a3f2c1f8cc9140; >= 18c198c96a815c962adc2b9b77909eec0be7df4d, < 82b951e6fbd31d85ae7f4feb5f00ddd4c5d256e2; b18fa894d615c8527e15d96b76c7448800e13899; 27d40bf72dd9a6600b76ad05859176ea9a1b4897; 4c089cefe30924fbe20dd1ee92774ea1f5eca834; 0e09cf81959d9f12b75ad5c6dd53d237432ed034; >= 5.15.154, < 5.15.168; >= 6.1.84, < 6.1.113; >= 6.6.24, < 6.6.33; >= 5.4.274, < 5.5; >= 5.10.215, < 5.11; >= 6.7.12, < 6.8; >= 6.8.3, < 6.9
LinuxLinux6.9

References

Timeline

Published
Jun 21, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-386335.5In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uart_driver_registered on driver removal The rCVE-2024-386345.5In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Lock port->lock when calling uart_handle_cts_change() CVE-2024-386357.1In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an CVE-2024-386365.5In the Linux kernel, the following vulnerability has been resolved: f2fs: multidev: fix to recognize valid zero block address As reported CVE-2024-386375.5In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of get_channel_from_mode If channel for CVE-2024-386387.2An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability couCVE-2024-386394.8An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to comCVE-2024-38648.1Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we preCVE-2024-386405.4A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authentCVE-2024-386417.8An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability coCVE-2024-386427.8An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local netwCVE-2024-386439.8A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability co