CVE-2024-47677

exfat: resolve memory leak from exfat_create_upcase_table()

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

exfat: resolve memory leak from exfat_create_upcase_table()

If exfat_load_upcase_table reaches end and returns -EINVAL,

allocated memory doesn't get freed and while

exfat_load_default_upcase_table allocates more memory, leading to a

memory leak.

Here's link to syzkaller crash report illustrating this issue:

https://syzkaller.appspot.com/text?tag=CrashReport&x=1406c201980000

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Published
2024-10-21T11:53Z
EPSS history
Timeline
  • 21 OCT 11:53Z
    exfat: resolve memory leak from exfat_create_upcase_table()
    cvelistv5