Vulnerability in Linux

CVE-2023-54064

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find() sets info->adapter_name if the adapter info came from SMBIOS, as it's not set in that case. However, this function can be called more than once, and it will leak the adapter name if it had already been set. So check for NULL before setting it.

EPSS: 0.002 (7.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c, 5.4, 0

References