CVE-2024-27077CWE-401

CVE-2024-27077

Medium · published May 1, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity

The entity->name (i.e. name) is allocated in v4l2_m2m_register_entity

but isn't freed in its following error-handling paths. This patch

adds such deallocation to prevent memleak of entity->name.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.3th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2024-05-01T17:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19, < 4.19.3114.19.311
linux/linux_kernel≥ 4.20, < 5.4.2735.4.273
linux/linux_kernel≥ 5.5, < 5.10.2145.10.214
linux/linux_kernel≥ 5.11, < 5.15.1535.15.153
linux/linux_kernel≥ 5.16, < 6.1.836.1.83
linux/linux_kernel≥ 6.2, < 6.6.236.6.23
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
linux/linux_kernel≥ 6.8, < 6.8.26.8.2
debian/debian_linuxall versions—
References (21)
https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 01 MAY 13:04Z
    media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
    cvelistv5