CVE-2024-35972

Summary

CVE-2024-35972 is a newly identified vulnerability affecting the Linux kernel. This issue involves the 'bnxt_en' subsystem, where a memory leak was discovered in the 'bnxt_rdma_aux_device_init()' function. If the memory allocation for 'ulp' fails during this process, the allocated edev will leak as it is not properly assigned. Consequently, the cleanup path will be unable to free it, leading to potential memory consumption issues. This vulnerability has been addressed in recent Linux kernel updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.