CVE-2024-43871

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a memory leakage caused by the driver API devm free percpu() when used to free memory allocated by devm alloc percpu(). This is fixed by using devres release() instead of devres destroy() within devm free percpu().

Recommendations To resolve the issue, update to Linux kernel version 6.6.50 or later. As a temporary workaround, consider restricting the use of the devm free percpu() function until a patch is available.