CVE-2024-26618

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the Linux kernel, specifically in the arm64/sme module. When the sme alloc() function is called with existing storage and not flushing, it will always allocate new storage, leading to a memory leak and state corruption. The fix involves separating the checks for flushing and existing storage, similar to how it is done for SVE. Callers that reallocate, such as when changing the vector length, should call sme free() themselves.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.