Answer in brief
CVE-2024-27388 records a Unknown severity vulnerability in SUNRPC: fix some memleaks in gssx_dec_option_array. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-27388 records a Unknown severity vulnerability in SUNRPC: fix some memleaks in gssx_dec_option_array. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1d658336b05f8697d6445834f8867f8ad5e4f735 <b97c37978ca825557d331c9012e0c1ddc0e42364 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <dd292e884c649f9b1c18af0ec75ca90b390cd044 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <934212a623cbab851848b6de377eb476718c3e4c || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <5e6013ae2c8d420faea553d363935f65badd32c3 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <996997d1fb2126feda550d6adcedcbd94911fc69 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <3cfcfc102a5e57b021b786a755a38935e357797d | b97c37978ca825557d331c9012e0c1ddc0e42364, bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8, bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8, dd292e884c649f9b1c18af0ec75ca90b390cd044, 934212a623cbab851848b6de377eb476718c3e4c, 5e6013ae2c8d420faea553d363935f65badd32c3, 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4, 996997d1fb2126feda550d6adcedcbd94911fc69, 3cfcfc102a5e57b021b786a755a38935e357797d |
| Linux/Linuxgeneric | 3.10 | Not reported |
Published upstream
May 1, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1d658336b05f8697d6445834f8867f8ad5e4f735 <b97c37978ca825557d331c9012e0c1ddc0e42364 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <dd292e884c649f9b1c18af0ec75ca90b390cd044 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <934212a623cbab851848b6de377eb476718c3e4c || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <5e6013ae2c8d420faea553d363935f65badd32c3 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <996997d1fb2126feda550d6adcedcbd94911fc69 || >=1d658336b05f8697d6445834f8867f8ad5e4f735 <3cfcfc102a5e57b021b786a755a38935e357797d | b97c37978ca825557d331c9012e0c1ddc0e42364, bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8, bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8, dd292e884c649f9b1c18af0ec75ca90b390cd044, 934212a623cbab851848b6de377eb476718c3e4c, 5e6013ae2c8d420faea553d363935f65badd32c3, 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4, 996997d1fb2126feda550d6adcedcbd94911fc69, 3cfcfc102a5e57b021b786a755a38935e357797d |
| Linux/Linuxgeneric | 3.10 | Not reported |
Published upstream
May 1, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths.
Quoted source text, attributed separately from HOL analysis.