CVE-2024-27074

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27074
In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without a deallocation thereafter. After the following call chain: saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go) go is freed and thus bounce is leaked.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/291cda0b805fc0d6e90d201710311630c8667159 Patch
https://git.kernel.org/stable/c/7405a0d4442792988e9ae834e7d84f9d163731a4 Patch
https://git.kernel.org/stable/c/790fa2c04dfb9f095ec372bf17909424d6e864b3 Patch
https://git.kernel.org/stable/c/7f11dd3d165b178e738fe73dfeea513e383bedb5 Patch
https://git.kernel.org/stable/c/b49fe84c6cefcc1c2336d793b53442e716c95073 Patch
https://git.kernel.org/stable/c/b9b683844b01d171a72b9c0419a2d760d946ee12 Patch
https://git.kernel.org/stable/c/d43988a23c32588ccd0c74219637afb96cd78661 Patch
https://git.kernel.org/stable/c/e04d15c8bb3e111dd69f98894acd92d63e87aac3 Patch
https://git.kernel.org/stable/c/f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 Patch
https://git.kernel.org/stable/c/291cda0b805fc0d6e90d201710311630c8667159 Patch
https://git.kernel.org/stable/c/7405a0d4442792988e9ae834e7d84f9d163731a4 Patch
https://git.kernel.org/stable/c/790fa2c04dfb9f095ec372bf17909424d6e864b3 Patch
https://git.kernel.org/stable/c/7f11dd3d165b178e738fe73dfeea513e383bedb5 Patch
https://git.kernel.org/stable/c/b49fe84c6cefcc1c2336d793b53442e716c95073 Patch
https://git.kernel.org/stable/c/b9b683844b01d171a72b9c0419a2d760d946ee12 Patch
https://git.kernel.org/stable/c/d43988a23c32588ccd0c74219637afb96cd78661 Patch
https://git.kernel.org/stable/c/e04d15c8bb3e111dd69f98894acd92d63e87aac3 Patch
https://git.kernel.org/stable/c/f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

23 Dec 2024, 14:31

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/291cda0b805fc0d6e90d201710311630c8667159 - () https://git.kernel.org/stable/c/291cda0b805fc0d6e90d201710311630c8667159 - Patch
References () https://git.kernel.org/stable/c/7405a0d4442792988e9ae834e7d84f9d163731a4 - () https://git.kernel.org/stable/c/7405a0d4442792988e9ae834e7d84f9d163731a4 - Patch
References () https://git.kernel.org/stable/c/790fa2c04dfb9f095ec372bf17909424d6e864b3 - () https://git.kernel.org/stable/c/790fa2c04dfb9f095ec372bf17909424d6e864b3 - Patch
References () https://git.kernel.org/stable/c/7f11dd3d165b178e738fe73dfeea513e383bedb5 - () https://git.kernel.org/stable/c/7f11dd3d165b178e738fe73dfeea513e383bedb5 - Patch
References () https://git.kernel.org/stable/c/b49fe84c6cefcc1c2336d793b53442e716c95073 - () https://git.kernel.org/stable/c/b49fe84c6cefcc1c2336d793b53442e716c95073 - Patch
References () https://git.kernel.org/stable/c/b9b683844b01d171a72b9c0419a2d760d946ee12 - () https://git.kernel.org/stable/c/b9b683844b01d171a72b9c0419a2d760d946ee12 - Patch
References () https://git.kernel.org/stable/c/d43988a23c32588ccd0c74219637afb96cd78661 - () https://git.kernel.org/stable/c/d43988a23c32588ccd0c74219637afb96cd78661 - Patch
References () https://git.kernel.org/stable/c/e04d15c8bb3e111dd69f98894acd92d63e87aac3 - () https://git.kernel.org/stable/c/e04d15c8bb3e111dd69f98894acd92d63e87aac3 - Patch
References () https://git.kernel.org/stable/c/f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 - () https://git.kernel.org/stable/c/f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Patch
First Time Debian debian Linux
Debian
Linux
Linux linux Kernel
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401

21 Nov 2024, 09:03

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/291cda0b805fc0d6e90d201710311630c8667159 - () https://git.kernel.org/stable/c/291cda0b805fc0d6e90d201710311630c8667159 -
References () https://git.kernel.org/stable/c/7405a0d4442792988e9ae834e7d84f9d163731a4 - () https://git.kernel.org/stable/c/7405a0d4442792988e9ae834e7d84f9d163731a4 -
References () https://git.kernel.org/stable/c/790fa2c04dfb9f095ec372bf17909424d6e864b3 - () https://git.kernel.org/stable/c/790fa2c04dfb9f095ec372bf17909424d6e864b3 -
References () https://git.kernel.org/stable/c/7f11dd3d165b178e738fe73dfeea513e383bedb5 - () https://git.kernel.org/stable/c/7f11dd3d165b178e738fe73dfeea513e383bedb5 -
References () https://git.kernel.org/stable/c/b49fe84c6cefcc1c2336d793b53442e716c95073 - () https://git.kernel.org/stable/c/b49fe84c6cefcc1c2336d793b53442e716c95073 -
References () https://git.kernel.org/stable/c/b9b683844b01d171a72b9c0419a2d760d946ee12 - () https://git.kernel.org/stable/c/b9b683844b01d171a72b9c0419a2d760d946ee12 -
References () https://git.kernel.org/stable/c/d43988a23c32588ccd0c74219637afb96cd78661 - () https://git.kernel.org/stable/c/d43988a23c32588ccd0c74219637afb96cd78661 -
References () https://git.kernel.org/stable/c/e04d15c8bb3e111dd69f98894acd92d63e87aac3 - () https://git.kernel.org/stable/c/e04d15c8bb3e111dd69f98894acd92d63e87aac3 -
References () https://git.kernel.org/stable/c/f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 - () https://git.kernel.org/stable/c/f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 -

05 Nov 2024, 10:16

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 23:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: medios: go7007: corrige una fuga de memoria en go7007_load_encoder En go7007_load_encoder, el rebote (es decir, go->boot_fw) se asigna sin una desasignación posterior. Después de la siguiente cadena de llamadas: saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go) go se libera y, por lo tanto, se filtra el rebote.
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2024-12-23 14:31

NVD link : CVE-2024-27074

Mitre link : CVE-2024-27074

CVE.ORG link : CVE-2024-27074

JSON object : View

Products Affected

linux

  • linux_kernel

debian

  • debian_linux
CWE
CWE-401

Missing Release of Memory after Effective Lifetime