In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: fix a resource leak in copy_net_ns() error handling path<\/p>\n
Currently, preinit_net() does two things:<\/p>\n
(1) call ns_common_init() which might fail
\n (2) initialize resources which does not fail<\/p>\n
However, preinit_net() is returning early when (1) fails, and copy_net_ns()
\nis jumping to the dec_ucounts: label. As a result, resources allocated by
\nnet_alloc() are leaking. We need to call key_remove_domain() and
\nnet_passive_dec() in order to release resources allocated by net_alloc().<\/p>\n
We cannot simply jump to the put_userns: label when preinit_net() failed,
\nfor (2) is not yet done. But we can reorder (1) and (2), for there is no
\ndependency between (1) and (2). Therefore, this patch decouples (1) from
\npreinit_net() and changes preinit_net() back to a void function, and calls
\nns_common_init() after preinit_net() succeeded. Then, we can jump to
\nimmediately after ns_common_free() of the put_userns: label.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: fix a resource leak in copy_net_ns() error handling path<\/p>\n
Currently, preinit_net() does two things:<\/p>\n
(1) call ns_common_init<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25486","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}