CVE Catalog
CVE-2024-27388
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
In the Linux kernel, the SUNRPC module fixed memory leaks in gssx_dec_option_array. Previously, error-handling paths did not free memory allocated for credentials and option array data.
Risk Assessment
Memory leaks can lead to exhaustion of system resources, potentially causing service outages or performance degradation.
Recommendation
Update the Linux kernel to a version containing the fix for CVE-2024-27388 to prevent memory leaks in SUNRPC.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths.