What’s Vulnerable › Vulnerabilities

CVE-2024-38617: kunit/fortify: Fix mismatched kvalloc()/vfree() usage

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-19 · updated 2026-06-17
• Weakness: CWE-763

Description

In the Linux kernel, the following vulnerability has been resolved: kunit/fortify: Fix mismatched kvalloc()/vfree() usage The kv*() family of tests were accidentally freeing with vfree() instead of kvfree(). Use kvfree() instead.

Affected products

• Linux kernel: from 6.2 before 6.6.33; from 6.7 before 6.8.12; from 6.9 before 6.9.3 — fixed in 6.6.33, 6.8.12, 6.9.3

How to fix

Upgrade to a fixed version: Linux kernel 6.6.33, 6.8.12, 6.9.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/03758d5a0932016b6d5f5bfbca580177e6bc937a
• https://git.kernel.org/stable/c/42d21c9727028fe7ee392223ba127484b1b8677e
• https://git.kernel.org/stable/c/7880dbf4eafe22a6a41a42e774f1122c814ed02d
• https://git.kernel.org/stable/c/998b18072ceb0613629c256b409f4d299829c7ec
• https://git.kernel.org/stable/c/03758d5a0932016b6d5f5bfbca580177e6bc937a
• https://git.kernel.org/stable/c/42d21c9727028fe7ee392223ba127484b1b8677e
• https://git.kernel.org/stable/c/7880dbf4eafe22a6a41a42e774f1122c814ed02d
• https://git.kernel.org/stable/c/998b18072ceb0613629c256b409f4d299829c7ec

Get alerted when CVE-2024-38617 or the next vulnerability affects your stack