一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

无

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

</details>

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS:

11.openEuler-24.03-LTS-Next:

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3:

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3:

9.openEuler-22.03-LTS-SP4:

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

3.openEuler-20.03-LTS-SP4(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

8.openEuler-22.03-LTS-SP3(5.10.0):

9.openEuler-22.03-LTS-SP4(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-35828](https://nvd.nist.gov/vuln/detail/CVE-2024-35828)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()In the for statement of lbs_allocate_cmd_buffer(), if the allocation ofcmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs tobe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

漏洞公开时间：2024-05-17 22:15

漏洞创建时间：2024-05-17 22:51:51

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-35828

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35828.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 | https://bugzilla.suse.com/show_bug.cgi?id=1224622 |

| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35828-0024@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2281180 |

| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a (6.9-rc1) | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-35828 | https://ubuntu.com/security/CVE-2024-35828 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-35828 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |

| ------- | -------- | ------- | -------- | --------- |

| linux | | https://git.kernel.org/linus/5f0e4aede01cb01fa633171f0533affd25328c3a | https://git.kernel.org/linus/876c9d3aeb989cf1961f2c228d309ba5dcfb1172 | ubuntu |

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP1(4.19.90):

4.openEuler-22.03-LTS(5.10.0):

5.openEuler-22.03-LTS-Next(5.10.0):

6.openEuler-22.03-LTS-SP1(5.10.0):

7.openEuler-22.03-LTS-SP2(5.10.0):

10.openEuler-24.03-LTS(6.6.0):

11.openEuler-24.03-LTS-Next(6.6.0):