Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-26839 Details

Description

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in init_credit_return When dma_alloc_coherent fails to allocate dd->cr_base[i].va, init_credit_return should deallocate dd->cr_base and dd->cr_base[i] that allocated before. Or those resources would be never freed and a memleak is triggered.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3	kernel.org	Patch
https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7	kernel.org	Patch
https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25	kernel.org	Patch
https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2	kernel.org	Patch
https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a	kernel.org	Patch
https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896	kernel.org	Patch
https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8	kernel.org	Patch
https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b	kernel.org	Patch
https://git.kernel.org/stable/c/2e4f9f20b32658ef3724aa46f7aef4908d2609e3	CVE	Patch
https://git.kernel.org/stable/c/3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7	CVE	Patch
https://git.kernel.org/stable/c/52de5805c147137205662af89ed7e083d656ae25	CVE	Patch
https://git.kernel.org/stable/c/809aa64ebff51eb170ee31a95f83b2d21efa32e2	CVE	Patch
https://git.kernel.org/stable/c/8412c86e89cc78d8b513cb25cf2157a2adf3670a	CVE	Patch
https://git.kernel.org/stable/c/b41d0ade0398007fb746213f09903d52a920e896	CVE	Patch
https://git.kernel.org/stable/c/cecfb90cf71d91e9efebd68b9e9b84661b277cc8	CVE	Patch
https://git.kernel.org/stable/c/f0d857ce31a6bc7a82afcdbadb8f7417d482604b	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	CVE	Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	CVE	Mailing List

see all 18 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-401	Missing Release of Memory after Effective Lifetime	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 4.3, < 4.19.308 >= 4.20, < 5.4.270 >= 5.5, < 5.10.211 >= 5.11, < 5.15.150 >= 5.16, < 6.1.80
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.8:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc2:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc3:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc4:::::: cpe:2.3:o:linux:linux_kernel:6.8:rc5:::::: Remediation No remediation found in references.
debian debian linux	10.0
CPE cpe:2.3:o:debian:debian_linux:10.0:::::::* Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Jan 14, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Nov 5, 2024	CVE Modified	kernel.org
Jun 27, 2024	CVE Modified	kernel.org
Jun 25, 2024	CVE Modified	kernel.org
May 29, 2024	CVE Modified	kernel.org
May 14, 2024	CVE Modified	kernel.org
Apr 17, 2024	New CVE Received	kernel.org