CVE-2024-38539

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37

Description: The vulnerability is related to a memory leak in the RDMA/cma component of the Linux kernel. The issue arises when the rdma put gid attr function is not called when sgid attr is set to ERR PTR(-ENODEV). This can lead to a kernel memory leak, which can be detected by the kernel memory leak detector. The vulnerability can be exploited to cause a denial of service.

Recommendations: To resolve the issue, update the Linux kernel to version 6.6.37 or later. This version includes the fix for the RDMA/cma memory leak vulnerability.