CVE-2024-27073CWE-401

CVE-2024-27073

High · published May 1, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: ttpci: fix two memleaks in budget_av_attach

When saa7146_register_device and saa7146_vv_init fails, budget_av_attach

should free the resources it allocates, like the error-handling of

ttpci_budget_init does. Besides, there are two fixme comment refers to

such deallocations.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.9th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2024-05-01T17:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.12, < 5.4.2735.4.273
linux/linux_kernel≥ 5.5, < 5.10.2145.10.214
linux/linux_kernel≥ 5.11, < 5.15.1535.15.153
linux/linux_kernel≥ 5.16, < 6.1.836.1.83
linux/linux_kernel≥ 6.2, < 6.6.236.6.23
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
linux/linux_kernel≥ 6.8, < 6.8.26.8.2
debian/debian_linuxall versions—
References (17)
https://git.kernel.org/stable/c/1597cd1a88cfcdc4bf8b1b44cd458fed9a5a5d63 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/24e51d6eb578b82ff292927f14b9f5ec05a46beb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/55ca0c7eae8499bb96f4e5d9b26af95e89c4e6a0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/656b8cc123d7635dd399d9f02594f27aa797ac3c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7393c681f9aa05ffe2385e8716989565eed2fe06 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/910363473e4bf97da3c350e08d915546dd6cc30b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/af37aed04997e644f7e1b52b696b62dcae3cc016 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d0b07f712bf61e1a3cf23c87c663791c42e50837 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1597cd1a88cfcdc4bf8b1b44cd458fed9a5a5d63 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/24e51d6eb578b82ff292927f14b9f5ec05a46beb · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/55ca0c7eae8499bb96f4e5d9b26af95e89c4e6a0 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/656b8cc123d7635dd399d9f02594f27aa797ac3c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7393c681f9aa05ffe2385e8716989565eed2fe06 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/910363473e4bf97da3c350e08d915546dd6cc30b · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/af37aed04997e644f7e1b52b696b62dcae3cc016 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d0b07f712bf61e1a3cf23c87c663791c42e50837 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 01 MAY 13:04Z
    media: ttpci: fix two memleaks in budget_av_attach
    cvelistv5