In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: fix some memleaks in gssx_dec_option_array

The creds and oa->data need to be freed in the error-handling paths after
their allocation. So this patch add these deallocations in the
corresponding paths.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00008.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < b97c37978ca825557d331c9012e0c1ddc0e42364
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < dd292e884c649f9b1c18af0ec75ca90b390cd044
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < 934212a623cbab851848b6de377eb476718c3e4c
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < 5e6013ae2c8d420faea553d363935f65badd32c3
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < 996997d1fb2126feda550d6adcedcbd94911fc69
1d658336b05f8697d6445834f8867f8ad5e4f735 affected < 3cfcfc102a5e57b021b786a755a38935e357797d
Linux Linux affected
Version Status Constraints
3.10 affected —
0 unaffected < 3.10
4.19.311 unaffected ≤ 4.19.*
5.4.273 unaffected ≤ 5.4.*
5.10.214 unaffected ≤ 5.10.*
5.15.153 unaffected ≤ 5.15.*
6.1.83 unaffected ≤ 6.1.*
6.6.23 unaffected ≤ 6.6.*
6.7.11 unaffected ≤ 6.7.*
6.8.2 unaffected ≤ 6.8.*
6.9 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.16.1.rt7.357.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:5102 2024-08-08T00:00:00Z
kernel-0:4.18.0-553.16.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:5101 2024-08-08T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Debian Subscribe
Debian Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3840-1 linux security update
Debian DLA Debian DLA DLA-3842-1 linux-5.10 security update
Debian DSA Debian DSA DSA-5681-1 linux security update
Ubuntu USN Ubuntu USN USN-6816-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6817-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6817-2 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6817-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6820-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6820-2 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-3 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6821-4 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6828-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6871-1 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-6878-1 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-6892-1 Linux kernel (IBM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6896-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6896-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6896-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6896-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6896-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6919-1 Linux kernel vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/3cfcfc102a5e57b021b786a755a38935e357797d cve-icon cve-icon
https://git.kernel.org/stable/c/5e6013ae2c8d420faea553d363935f65badd32c3 cve-icon cve-icon
https://git.kernel.org/stable/c/934212a623cbab851848b6de377eb476718c3e4c cve-icon cve-icon
https://git.kernel.org/stable/c/9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4 cve-icon cve-icon
https://git.kernel.org/stable/c/996997d1fb2126feda550d6adcedcbd94911fc69 cve-icon cve-icon
https://git.kernel.org/stable/c/b97c37978ca825557d331c9012e0c1ddc0e42364 cve-icon cve-icon
https://git.kernel.org/stable/c/bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8 cve-icon cve-icon
https://git.kernel.org/stable/c/bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8 cve-icon cve-icon
https://git.kernel.org/stable/c/dd292e884c649f9b1c18af0ec75ca90b390cd044 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024050135-CVE-2024-27388-04eb@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-27388 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-27388 cve-icon
History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 7e-05}

 epss

{'score': 8e-05}

Tue, 14 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
Linux
Linux linux Kernel
CPEs cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Linux
Linux linux Kernel

Tue, 26 Nov 2024 06:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Tue, 05 Nov 2024 10:45:00 +0000

Type Values Removed Values Added
References

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Aug 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
cpe:/o:redhat:enterprise_linux:8
Vendors & Products Redhat
Redhat enterprise Linux

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T09:03:54.661Z

Reserved: 2024-02-25T13:47:42.676Z

Link: CVE-2024-27388

cve-icon Vulnrichment

Updated: 2024-08-02T00:34:52.507Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-01T13:15:51.550

Modified: 2025-01-14T14:56:08.617

Link: CVE-2024-27388

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-01T00:00:00Z

Links: CVE-2024-27388 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses