{
  "cveId": "CVE-2024-26972",
  "url": "https://patchblox.com/security/cve/CVE-2024-26972",
  "summary": "CVE-2024-26972 is fixed in 43 products on 1 platform, first by ALAS2023-2024-517, released February 15, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: ubifs_symlink: Fix memleak of inode-\u003Ei_li...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: ubifs_symlink: Fix memleak of inode-\u003Ei_link in error path\n\nFor error handling path in ubifs_symlink(), inode will be marked as\nbad first, then iput() is invoked. If inode-\u003Ei_link is initialized by\nfscrypt_encrypt_symlink() in encryption scenario, inode-\u003Ei_link won\u0027t\nbe freed by callchain ubifs_free_inode -\u003E fscrypt_free_inode in error\nhandling path, because make_bad_inode() has changed \u0027inode-\u003Ei_mode\u0027 as\n\u0027S_IFREG\u0027.\nFollowing kmemleak is easy to be reproduced by injecting error in\nubifs_jnl_update() when doing symlink in encryption scenario:\n unreferenced object 0xffff888103da3d98 (size 8):\n  comm \u0022ln\u0022, pid 1692, jiffies 4294914701 (age 12.045s)\n  backtrace:\n   kmemdup\u002B0x32/0x70\n   __fscrypt_encrypt_symlink\u002B0xed/0x1c0\n   ubifs_symlink\u002B0x210/0x300 [ubifs]\n   vfs_symlink\u002B0x216/0x360\n   do_symlinkat\u002B0x11a/0x190\n   do_syscall_64\u002B0x3b/0xe0\nThere are two ways fixing it:\n 1. Remove make_bad_inode() in error handling path. We can do that\n    because ubifs_evict_inode() will do same processes for good\n    symlink inode and bad symlink inode, for inode-\u003Ei_nlink checking\n    is before is_bad_inode().\n 2. Free inode-\u003Ei_link before marking inode bad.\nMethod 2 is picked, it has less influence, personally, I think.",
  "published": "2024-02-15T02:51:00Z",
  "severity": "important",
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.1",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.5.4",
      "fix": "SUSE-SU-2024:2135-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2135-1",
      "released": "2024-06-21T11:03:42Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.5.4",
      "fix": "SUSE-SU-2024:2135-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2135-1",
      "released": "2024-06-21T11:03:42Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3.150600.12.2.7",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3.150600.12.2.7",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.4",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.4",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.77-99.164",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_1",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_1",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.7",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.1",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.2",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.2",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.5.4",
      "fix": "SUSE-SU-2024:2135-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2135-1",
      "released": "2024-06-21T11:03:42Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.5.4",
      "fix": "SUSE-SU-2024:2135-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2135-1",
      "released": "2024-06-21T11:03:42Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.1",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.1",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.5.1",
      "fix": "SUSE-SU-2024:2135-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2135-1",
      "released": "2024-06-21T11:03:42Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.5.1",
      "fix": "SUSE-SU-2024:2135-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2135-1",
      "released": "2024-06-21T11:03:42Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.7.3",
      "fix": "SUSE-SU-2024:2203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2203-1",
      "released": "2024-06-25T13:04:38Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.8.9-1",
      "fix": "CVE-2024-26972",
      "url": "https://patchblox.com/security/fix/linux/cve-2024-26972",
      "released": "2024-05-01T06:15:13Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.77-99.164.amzn2023",
      "fix": "ALAS2023-2024-517",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517",
      "released": "2024-02-15T02:51:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}