cve/2024/CVE-2024-56710.md
2025-09-29 16:08:36 +00:00

19 lines
1.1 KiB
Markdown

### [CVE-2024-56710](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56710)
![](https://img.shields.io/static/v1?label=Product&message=Linux&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=03bc06c7b0bd8d86b9f17f459acaeb1283ba2700%3C%2044e518abbb498075ae85c7d1d1a503a6bb05ea2d%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
In the Linux kernel, the following vulnerability has been resolved:ceph: fix memory leak in ceph_direct_read_write()The bvecs array which is allocated in iter_get_bvecs_alloc() is leakedand pages remain pinned if ceph_alloc_sparse_ext_map() fails.There is no need to delay the allocation of sparse_ext map until afterthe bvecs array is set up, so fix this by moving sparse_ext allocationa bit earlier. Also, make a similar adjustment in __ceph_sync_read()for consistency (a leak of the same kind in __ceph_sync_read() has beenaddressed differently).
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/cku-heise/euvd-api-doc
- https://github.com/oogasawa/Utility-security