CVE-2024-53076CWE-401

CVE-2024-53076

High · published November 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()

If per_time_scales[i] or per_time_gains[i] kcalloc fails in the for loop

of iio_gts_build_avail_scale_table(), the err_free_out will fail to call

kfree() each time when i is reduced to 0, so all the per_time_scales[0]

and per_time_gains[0] will not be freed, which will cause memory leaks.

Fix it by checking if i >= 0.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.8th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2024-11-19T23:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.4, < 6.6.606.6.60
linux/linux_kernel≥ 6.7, < 6.11.76.11.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 19 NOV 17:31Z
    iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
    cvelistv5