CVE-2024-27077

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27077
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity The entity->name (i.e. name) is allocated in v4l2_m2m_register_entity but isn't freed in its following error-handling paths. This patch adds such deallocation to prevent memleak of entity->name.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 Patch
https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d Patch
https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 Patch
https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 Patch
https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 Patch
https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d Patch
https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f Patch
https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 Patch
https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef Patch
https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 Patch
https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d Patch
https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 Patch
https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 Patch
https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 Patch
https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d Patch
https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f Patch
https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 Patch
https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

23 Dec 2024, 14:38

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 - () https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 - Patch
References () https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d - () https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d - Patch
References () https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 - () https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 - Patch
References () https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 - () https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 - Patch
References () https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 - () https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 - Patch
References () https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d - () https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d - Patch
References () https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f - () https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f - Patch
References () https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 - () https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 - Patch
References () https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef - () https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Patch
First Time Debian debian Linux
Debian
Linux
Linux linux Kernel
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:03

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 - () https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4 -
References () https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d - () https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d -
References () https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 - () https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 -
References () https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 - () https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458 -
References () https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 - () https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211 -
References () https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d - () https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d -
References () https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f - () https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f -
References () https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 - () https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 -
References () https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef - () https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef -

05 Nov 2024, 10:16

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 23:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: medio: v4l2-mem2mem: corrige una fuga de mem en v4l2_m2m_register_entity La entidad->nombre (es decir, nombre) se asigna en v4l2_m2m_register_entity pero no se libera en las siguientes rutas de manejo de errores. Este parche agrega dicha desasignación para evitar la fuga de memoria de entidad->nombre.
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2024-12-23 14:38

NVD link : CVE-2024-27077

Mitre link : CVE-2024-27077

CVE.ORG link : CVE-2024-27077

JSON object : View

Products Affected

linux

  • linux_kernel

debian

  • debian_linux
CWE
CWE-401

Missing Release of Memory after Effective Lifetime