{"id":"DEBIAN-CVE-2024-38539","details":"In the Linux kernel, the following vulnerability has been resolved:  RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw  When running blktests nvme/rdma, the following kmemleak issue will appear.  kmemleak: Kernel memory leak detector initialized (mempool available:36041) kmemleak: Automatic memory scanning thread started kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) kmemleak: 17 new suspected memory leaks (see /sys/kernel/debug/kmemleak) kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak)  unreferenced object 0xffff88855da53400 (size 192):   comm \"rdma\", pid 10630, jiffies 4296575922   hex dump (first 32 bytes):     37 00 00 00 00 00 00 00 c0 ff ff ff 1f 00 00 00  7...............     10 34 a5 5d 85 88 ff ff 10 34 a5 5d 85 88 ff ff  .4.].....4.]....   backtrace (crc 47f66721):     [\u003cffffffff911251bd\u003e] kmalloc_trace+0x30d/0x3b0     [\u003cffffffffc2640ff7\u003e] alloc_gid_entry+0x47/0x380 [ib_core]     [\u003cffffffffc2642206\u003e] add_modify_gid+0x166/0x930 [ib_core]     [\u003cffffffffc2643468\u003e] ib_cache_update.part.0+0x6d8/0x910 [ib_core]     [\u003cffffffffc2644e1a\u003e] ib_cache_setup_one+0x24a/0x350 [ib_core]     [\u003cffffffffc263949e\u003e] ib_register_device+0x9e/0x3a0 [ib_core]     [\u003cffffffffc2a3d389\u003e] 0xffffffffc2a3d389     [\u003cffffffffc2688cd8\u003e] nldev_newlink+0x2b8/0x520 [ib_core]     [\u003cffffffffc2645fe3\u003e] rdma_nl_rcv_msg+0x2c3/0x520 [ib_core]     [\u003cffffffffc264648c\u003e] rdma_nl_rcv_skb.constprop.0.isra.0+0x23c/0x3a0 [ib_core]     [\u003cffffffff9270e7b5\u003e] netlink_unicast+0x445/0x710     [\u003cffffffff9270f1f1\u003e] netlink_sendmsg+0x761/0xc40     [\u003cffffffff9249db29\u003e] __sys_sendto+0x3a9/0x420     [\u003cffffffff9249dc8c\u003e] __x64_sys_sendto+0xdc/0x1b0     [\u003cffffffff92db0ad3\u003e] do_syscall_64+0x93/0x180     [\u003cffffffff92e00126\u003e] entry_SYSCALL_64_after_hwframe+0x71/0x79  The root cause: rdma_put_gid_attr is not called when sgid_attr is set to ERR_PTR(-ENODEV).","modified":"2026-09-15T09:03:08.685354512Z","published":"2024-06-19T14:15:14.193Z","upstream":["CVE-2024-38539"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-38539"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38539.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38539.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}