Wind River Support Network

HomeDefectsLIN1024-2801

Fixed

LIN1024-2801 : Security Advisory - linux - CVE-2024-41002

Created: Jul 13, 2024 Updated: Aug 28, 2024

Resolved Date: Jul 14, 2024

Found In Version: 10.24.33.1

Fix Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/sec - Fix memory leak for sec resource release

The AIV is one of the SEC resources. When releasing resources,
it need to release the AIV resources at the same time.
Otherwise, memory leakage occurs.

The aiv resource release is added to the sec resource release
function.

CREATE(Triage):(User=admin) CVE-2024-41002 (https://nvd.nist.gov/vuln/detail/CVE-2024-41002)

CVEs

CVE-2024-41002