What’s Vulnerable › Vulnerabilities

CVE-2024-26655: Fix memory leak in posix_clock_open()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-01 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock. Re-organize the code slightly to make it all more obvious.

Affected products

• Linux kernel: from 6.7 before 6.7.12; from 6.8 before 6.8.3; 6.9-rc1 — fixed in 6.7.12, 6.8.3

How to fix

Upgrade to a fixed version: Linux kernel 6.7.12, 6.8.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847
• https://git.kernel.org/stable/c/375abf52353ca5e1a2e5f763629a870f91d0c38a
• https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8
• https://git.kernel.org/stable/c/62a5adf57b56ee94075c889abea518b9dc66895d
• https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341
• https://git.kernel.org/stable/c/ea2d9bfd422e92fd197f6a0b1fe7d81413b871e0
• https://git.kernel.org/stable/c/f845cfa1a5ae697782bfcb843c9d06d3bc0cbbb6
• https://git.kernel.org/stable/c/0200dd7ed2335469955d7e69cc1a6fa7df1f3847
• https://git.kernel.org/stable/c/5b4cdd9c5676559b8a7c944ac5269b914b8c0bb8
• https://git.kernel.org/stable/c/a88649b49523e8cbe95254440d803e38c19d2341

Get alerted when CVE-2024-26655 or the next vulnerability affects your stack