CVE-2024-27418

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: mctp: take ownership of skb in mctp_local_output<br /> <br /> Currently, mctp_local_output only takes ownership of skb on success, and<br /> we may leak an skb if mctp_local_output fails in specific states; the<br /> skb ownership isn&amp;#39;t transferred until the actual output routing occurs.<br /> <br /> Instead, make mctp_local_output free the skb on all error paths up to<br /> the route action, so it always consumes the passed skb.