https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:30:17 +0000 https://vulnerability.circl.lu/vuln/cve-2024-35882 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP</p> <p>Jan Schunk reports that his small NFS servers suffer from memory exhaustion after just a few days. A bisect shows that commit e18e157bb5c8 (&#34;SUNRPC: Send RPC message on TCP with a single sock_sendmsg() call&#34;) is the first bad commit.</p> <p>That commit assumed that sock_sendmsg() releases all the pages in the underlying bio_vec array, but the reality is that it doesn&#39;t. svc_xprt_release() releases the rqst&#39;s response pages, but the record marker page fragment isn&#39;t one of those, so it is never released.</p> <p>This is a narrow fix that can be applied to stable kernels. A more extensive fix is in the works.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP</p> <p>Jan Schunk reports that his small NFS servers suffer from memory exhaustion after just a few days. A bisect shows that commit e18e157bb5c8 (&#34;SUNRPC: Send RPC message on TCP with a single sock_sendmsg() call&#34;) is the first bad commit.</p> <p>That commit assumed that sock_sendmsg() releases all the pages in the underlying bio_vec array, but the reality is that it doesn&#39;t. svc_xprt_release() releases the rqst&#39;s response pages, but the record marker page fragment isn&#39;t one of those, so it is never released.</p> <p>This is a narrow fix that can be applied to stable kernels. A more extensive fix is in the works.</p> https://vulnerability.circl.lu/vuln/cve-2024-35882