Memory leak in Linux kernel - CVE-2024-57841

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU102892

Memory leak in Linux kernel - CVE-2024-57841

Published: January 17, 2025 / Updated: May 11, 2025


Vulnerability identifier: #VU102892
CSH Severity: Low
CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-57841
CWE-ID: CWE-401
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the tcp_conn_request() function in net/ipv4/tcp_input.c. A local user can perform a denial of service (DoS) attack.


Affected software

Linux kernel
Ubuntu
openEuler
linux-image-aws-fips (Ubuntu package)
linux-image-fips (Ubuntu package)
linux-image-intel-iot-realtime (Ubuntu package)
linux-image-5.15.0-1083-azure-fips (Ubuntu package)
linux-image-5.15.0-1079-gcp-fips (Ubuntu package)
linux-image-5.15.0-1073-intel-iot-realtime (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-5.15.0-135-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-135-lowlatency (Ubuntu package)
linux-image-5.15.0-135-generic-lpae (Ubuntu package)
linux-image-5.15.0-135-generic-64k (Ubuntu package)
linux-image-5.15.0-135-generic (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-136-generic (Ubuntu package)
linux-image-5.15.0-136-generic-64k (Ubuntu package)
linux-image-5.15.0-136-generic-lpae (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-5.15.0-1021-nvidia-tegra-igx (Ubuntu package)
linux-image-5.15.0-1021-nvidia-tegra-igx-rt (Ubuntu package)
linux-image-nvidia-tegra-igx (Ubuntu package)
linux-image-nvidia-tegra-igx-rt (Ubuntu package)
linux-image-nvidia-tegra-rt (Ubuntu package)
linux-image-5.15.0-1033-nvidia-tegra (Ubuntu package)
linux-image-5.15.0-1033-nvidia-tegra-rt (Ubuntu package)
linux-image-nvidia-tegra (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.15.0-1044-xilinx-zynqmp (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.15.0-1062-gkeop (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1072-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1074-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1074-nvidia (Ubuntu package)
linux-image-5.15.0-1074-raspi (Ubuntu package)
linux-image-5.15.0-1074-ibm (Ubuntu package)
linux-image-5.15.0-1075-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.15.0-1076-kvm (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1077-oracle (Ubuntu package)
linux-image-5.15.0-1077-gke (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1077-intel-iotg (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1079-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1080-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.15.0-1081-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1084-azure (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1086-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-5.15.0-1086-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
python3-perf-debuginfo
bpftool
kernel
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
linux (Ubuntu package)
linux-hwe-6.8 (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure-nvidia (Ubuntu package)
linux-gke (Ubuntu package)
linux-oracle-6.8 (Ubuntu package)
linux-azure (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-realtime (Ubuntu package)
linux-image-virtual-hwe-24.04 (Ubuntu package)
linux-image-oem-24.04a (Ubuntu package)
linux-image-oem-24.04 (Ubuntu package)
linux-image-generic-hwe-24.04 (Ubuntu package)
linux-image-generic-64k-hwe-24.04 (Ubuntu package)
linux-image-6.11.0-21-generic-64k (Ubuntu package)
linux-image-6.11.0-21-generic (Ubuntu package)
linux-image-realtime-hwe-24.04 (Ubuntu package)
linux-image-realtime (Ubuntu package)
linux-image-6.11.0-1007-realtime (Ubuntu package)
linux-image-6.11.0-1010-raspi (Ubuntu package)
linux-image-6.11.0-1011-gcp-64k (Ubuntu package)
linux-image-gcp-64k (Ubuntu package)
linux-image-6.11.0-1011-gcp (Ubuntu package)
linux-image-6.11.0-1011-aws (Ubuntu package)
linux-image-6.11.0-1011-lowlatency (Ubuntu package)
linux-image-6.11.0-1011-lowlatency-64k (Ubuntu package)
linux-image-lowlatency-hwe-24.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-24.04 (Ubuntu package)
linux-image-6.11.0-1012-azure-fde (Ubuntu package)
linux-image-6.11.0-1012-azure (Ubuntu package)
linux-image-6.11.0-1013-oracle (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-6.11.0-1013-oracle-64k (Ubuntu package)
linux-image-oem-24.04b (Ubuntu package)
linux-image-6.11.0-1017-oem (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

How to mitigate CVE-2024-57841

Install update from vendor's website.

Linux kernel - update to 6.1.124
linux-image-aws-fips (Ubuntu package) - update to linux-image-azure-fips
linux-image-fips (Ubuntu package) - update to linux-image-gcp-fips
linux-image-intel-iot-realtime (Ubuntu package) - update to linux-image-realtime
linux-image-5.15.0-1083-azure-fips (Ubuntu package) - update to linux-image-5.15.0-135-fips
linux-image-5.15.0-1079-gcp-fips (Ubuntu package) - update to linux-image-5.15.0-1080-aws-fips
linux-image-5.15.0-1073-intel-iot-realtime (Ubuntu package) - update to linux-image-5.15.0-1080-realtime
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.135.122, 6.11.0-1011.12
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.135.122, 6.11.0-1011.12
linux-image-generic-lpae (Ubuntu package) - update to 5.15.0.135.133
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.135.133, 6.11.0-21.21
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.135.133, 6.11.0-21.21
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.135.133, 6.11.0-21.21
linux-image-5.15.0-135-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-135.146, 5.15.0-135.146~20.04.1
linux-image-5.15.0-135-lowlatency (Ubuntu package) - addressed in versions 5.15.0-135.146, 5.15.0-135.146~20.04.1
linux-image-5.15.0-135-generic-lpae (Ubuntu package) - update to 5.15.0-135.146
linux-image-5.15.0-135-generic-64k (Ubuntu package) - update to 5.15.0-135.146
linux-image-5.15.0-135-generic (Ubuntu package) - update to 5.15.0-135.146
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.135.146~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.135.146~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-5.15.0-136-generic (Ubuntu package) - update to 5.15.0-136.147~20.04.1
linux-image-5.15.0-136-generic-64k (Ubuntu package) - update to 5.15.0-136.147~20.04.1
linux-image-5.15.0-136-generic-lpae (Ubuntu package) - update to 5.15.0-136.147~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-5.15.0-1021-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0-1021.21
linux-image-5.15.0-1021-nvidia-tegra-igx-rt (Ubuntu package) - update to 5.15.0-1021.21
linux-image-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0.1021.23
linux-image-nvidia-tegra-igx-rt (Ubuntu package) - update to 5.15.0.1021.23
linux-image-nvidia-tegra-rt (Ubuntu package) - update to 5.15.0.1033.33
linux-image-5.15.0-1033-nvidia-tegra (Ubuntu package) - update to 5.15.0-1033.33
linux-image-5.15.0-1033-nvidia-tegra-rt (Ubuntu package) - update to 5.15.0-1033.33
linux-image-nvidia-tegra (Ubuntu package) - update to 5.15.0.1033.33
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.15.0.1044.48
linux-image-5.15.0-1044-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1044.48
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1062.61
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1062.61
linux-image-5.15.0-1062-gkeop (Ubuntu package) - update to 5.15.0-1062.70
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1072.68, 5.15.0.1074.77~20.04.1
linux-image-5.15.0-1072-ibm (Ubuntu package) - update to 5.15.0-1072.75
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1074.72
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1074.72, 6.11.0-1010.10
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1074.74
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1074.74
linux-image-5.15.0-1074-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1074.75
linux-image-5.15.0-1074-nvidia (Ubuntu package) - update to 5.15.0-1074.75
linux-image-5.15.0-1074-raspi (Ubuntu package) - update to 5.15.0-1074.77
linux-image-5.15.0-1074-ibm (Ubuntu package) - update to 5.15.0-1074.77~20.04.1
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1075.75, 5.15.0.1077.83~20.04.1
linux-image-5.15.0-1075-intel-iotg (Ubuntu package) - update to 5.15.0-1075.81
linux-image-kvm (Ubuntu package) - update to 5.15.0.1076.72
linux-image-5.15.0-1076-kvm (Ubuntu package) - update to 5.15.0-1076.81
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1077.73
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1077.76
linux-image-gke (Ubuntu package) - update to 5.15.0.1077.76
linux-image-5.15.0-1077-oracle (Ubuntu package) - addressed in versions 5.15.0-1077.83, 5.15.0-1077.83~20.04.1
linux-image-5.15.0-1077-gke (Ubuntu package) - update to 5.15.0-1077.83
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1077.83~20.04.1, 6.11.0-1013.14
linux-image-intel (Ubuntu package) - update to 5.15.0.1077.83~20.04.1
linux-image-5.15.0-1077-intel-iotg (Ubuntu package) - update to 5.15.0-1077.83~20.04.1
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1079.75
linux-image-5.15.0-1079-gcp (Ubuntu package) - update to 5.15.0-1079.88
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1080.82
linux-image-5.15.0-1080-aws (Ubuntu package) - update to 5.15.0-1080.87~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1080.87~20.04.1, 6.11.0-1011.12
linux-image-5.15.0-1081-gcp (Ubuntu package) - update to 5.15.0-1081.90~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1081.90~20.04.1, 6.11.0-1011.11
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1084.82
linux-image-5.15.0-1084-azure (Ubuntu package) - update to 5.15.0-1084.93
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1086.95~20.04.1, 6.11.0-1012.12
linux-image-5.15.0-1086-azure (Ubuntu package) - update to 5.15.0-1086.95~20.04.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1086.95~20.04.1
linux-image-5.15.0-1086-azure-fde (Ubuntu package) - update to 5.15.0-1086.95~20.04.1.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1086.95~20.04.1.61, 6.11.0-1012.12
python3-perf-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
bpftool - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
bpftool-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-debugsource - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-devel - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-headers - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-source - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-tools - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-tools-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-tools-devel - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
perf - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
perf-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
python3-perf - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
linux (Ubuntu package) - addressed in versions 6.8.0-60.63, 6.8.0-60.63.1, 6.8.0-60.63.1~22.04.1, 6.8.0-1026.26, 6.8.0-1026.27, 6.8.0-1029.31, 6.8.0-1029.31~22.04.1
linux-hwe-6.8 (Ubuntu package) - update to 6.8.0-60.63~22.04.1
linux-gcp (Ubuntu package) - addressed in versions 6.8.0-1012.14, 6.8.0-1030.32, 6.8.0-1030.32~22.04.1
linux-azure-nvidia (Ubuntu package) - update to 6.8.0-1016.17
linux-gke (Ubuntu package) - update to 6.8.0-1025.29
linux-oracle-6.8 (Ubuntu package) - update to 6.8.0-1026.27~22.04.1
linux-azure (Ubuntu package) - addressed in versions 6.8.0-1028.28, 6.8.0-1029.34, 6.8.0-1029.34~22.04.1
linux-nvidia (Ubuntu package) - addressed in versions 6.8.0-1028.31, 6.8.0-1028.31.1, 6.8.0-1028.31~22.04.1
linux-realtime (Ubuntu package) - update to 6.8.1-1022.23
linux-image-virtual-hwe-24.04 (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1
linux-image-oem-24.04a (Ubuntu package) - update to 6.11.0-21.21
linux-image-oem-24.04 (Ubuntu package) - update to 6.11.0-21.21
linux-image-generic-hwe-24.04 (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1
linux-image-generic-64k-hwe-24.04 (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1
linux-image-6.11.0-21-generic-64k (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1+1
linux-image-6.11.0-21-generic (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1+1
linux-image-realtime-hwe-24.04 (Ubuntu package) - update to 6.11.0-1007.7
linux-image-realtime (Ubuntu package) - update to 6.11.0-1007.7
linux-image-6.11.0-1007-realtime (Ubuntu package) - update to 6.11.0-1007.7
linux-image-6.11.0-1010-raspi (Ubuntu package) - update to 6.11.0-1010.10
linux-image-6.11.0-1011-gcp-64k (Ubuntu package) - update to 6.11.0-1011.11
linux-image-gcp-64k (Ubuntu package) - update to 6.11.0-1011.11
linux-image-6.11.0-1011-gcp (Ubuntu package) - update to 6.11.0-1011.11
linux-image-6.11.0-1011-aws (Ubuntu package) - update to 6.11.0-1011.12
linux-image-6.11.0-1011-lowlatency (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-6.11.0-1011-lowlatency-64k (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-lowlatency-hwe-24.04 (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-lowlatency-64k-hwe-24.04 (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-6.11.0-1012-azure-fde (Ubuntu package) - update to 6.11.0-1012.12
linux-image-6.11.0-1012-azure (Ubuntu package) - update to 6.11.0-1012.12
linux-image-6.11.0-1013-oracle (Ubuntu package) - update to 6.11.0-1013.14
linux-image-oracle-64k (Ubuntu package) - update to 6.11.0-1013.14
linux-image-6.11.0-1013-oracle-64k (Ubuntu package) - update to 6.11.0-1013.14
linux-image-oem-24.04b (Ubuntu package) - update to 6.11.0-1017.17
linux-image-6.11.0-1017-oem (Ubuntu package) - update to 6.11.0-1017.17

External References

Related Security Bulletins