CVE-2026-31459: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMON_SYSFS can leak memory under allocation failure, and do NULL pointer dereference when a privileged user make wrong sequences of control. Fix those. This patch (of 3): When damon_sysfs_new_test_ctx() fails in damon_sysfs_commit_input(), param_ctx is leaked because the early return skips the cleanup at the out label. Destroy param_ctx before returning.

Засегнати продукти

• Linux Linux: f0c5118ebb0eb7e4fd6f0d2ace3315ca141b317f преди e9de9f3ce06b133a348006668bc8d25c6e504867; f0c5118ebb0eb7e4fd6f0d2ace3315ca141b317f преди f76f0a964bc3d7b7e253b43c669c41356bc54e71; f0c5118ebb0eb7e4fd6f0d2ace3315ca141b317f преди 7fe000eb32904758a85e62f6ea9483f89d5dabfc; 5b3609d9b9650bdea0bfdf643e0ce57e1aed67fc; 6.17.6 преди 6.18
• Linux Linux: 6.18; преди 6.18; 6.18.21 до 6.18.*; 6.19.11 до 6.19.*; 7.0 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-31459
• https://nvd.nist.gov/vuln/detail/CVE-2026-31459
• https://git.kernel.org/stable/c/e9de9f3ce06b133a348006668bc8d25c6e504867
• https://git.kernel.org/stable/c/f76f0a964bc3d7b7e253b43c669c41356bc54e71
• https://git.kernel.org/stable/c/7fe000eb32904758a85e62f6ea9483f89d5dabfc