CVE-2024-56712

Summary

CVE-2024-56712 is a newly identified vulnerability in the Linux kernel. In the function "export_udmabuf()," if dma_buf_fd() fails due to a full FD table, a dma_buf owning the udmabuf is created but not properly handled. This results in a dma_buf being left in memory with a dangling pointer, leading to a memory leak. To address this issue, the dma_buf_fd() call has been moved out of export_udmabuf() to enable different error handling. Although the code structure has changed significantly since commit 5e72b2b41a21, the memory leak appears to have existed since the introduction of udmabuf.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.