CVE-2024-25740

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.7.4

Description A memory leak flaw was found in the UBI driver in the Linux kernel, specifically in the drivers/mtd/ubi/attach.c module, due to the kobj->name not being released. This issue is related to the UBI IOCATT function and may allow an attacker to cause a denial of service or other impact.

Recommendations For Linux kernel versions through 6.7.4, consider updating to a newer version that includes a fix for this issue. As a temporary workaround, restricting access to the vulnerable ubi attach() function in the UBI driver may help minimize the risk of exploitation.