CVE Database
/

CVE-2024-26900

Back to search

CVE-2024-26900

Published: Apr 17, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: md: fix kmemleak of rdev->serial If kobject_add() is fail in bind_rdev_to_array(), 'rdev->serial' will be alloc not be freed, and kmemleak occurs. unreferenced object 0xffff88815a350000 (size 49152): comm "mdadm", pid 789, jiffies 4294716910 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc f773277a): [<0000000058b0a453>] kmemleak_alloc+0x61/0xe0 [<00000000366adf14>] __kmalloc_large_node+0x15e/0x270 [<000000002e82961b>] __kmalloc_node.cold+0x11/0x7f [<00000000f206d60a>] kvmalloc_node+0x74/0x150 [<0000000034bf3363>] rdev_init_serial+0x67/0x170 [<0000000010e08fe9>] mddev_create_serial_pool+0x62/0x220 [<00000000c3837bf0>] bind_rdev_to_array+0x2af/0x630 [<0000000073c28560>] md_add_new_disk+0x400/0x9f0 [<00000000770e30ff>] md_ioctl+0x15bf/0x1c10 [<000000006cfab718>] blkdev_ioctl+0x191/0x3f0 [<0000000085086a11>] vfs_ioctl+0x22/0x60 [<0000000018b656fe>] __x64_sys_ioctl+0xba/0xe0 [<00000000e54e675e>] do_syscall_64+0x71/0x150 [<000000008b0ad622>] entry_SYSCALL_64_after_hwframe+0x6c/0x74

VendorProductVersions

Linux

Linux

affected
963c555e75b033202dd76cf6325a7b7c83d08d5f - < fb5b347efd1bda989846ffc74679d181222fb123
affected
963c555e75b033202dd76cf6325a7b7c83d08d5f - < f3a1787dc48213f6caea5ba7d47e0222e7fa34a9
affected
963c555e75b033202dd76cf6325a7b7c83d08d5f - < beaf11969fd5cbe6f09cefaa34df1ce8578e8dd9
affected
963c555e75b033202dd76cf6325a7b7c83d08d5f - < 9fd0198f7ef06ae0d6636fb0578560857dead995
affected
963c555e75b033202dd76cf6325a7b7c83d08d5f - < 6d32c832a88513f65c2c2c9c75954ee8b387adea

+2 more versions

Linux

Linux

affected
5.3
unaffected
0 - < 5.3
unaffected
5.10.217 - <= 5.10.*
unaffected
5.15.159 - <= 5.15.*
unaffected
6.1.91 - <= 6.1.*

+4 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now