CVE-2024-56572

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56572
In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here. To mitigate this, free the buffer when allegro_alloc_buffer fails.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0f514068fbc5d4d189c817adc7c4e32cffdc2e47 Patch
https://git.kernel.org/stable/c/17e5613666209be4e5be1f1894f1a6014a8a0658 Patch
https://git.kernel.org/stable/c/64f72a738864b506ab50b4a6cb3ce3c3e04b71af Patch
https://git.kernel.org/stable/c/6712a28a4f923ffdf51cff267ad05a634ee1babc Patch
https://git.kernel.org/stable/c/74a65313578b35e1239966adfa7ac2bdd60caf00 Patch
https://git.kernel.org/stable/c/891b5790bee8fc6ddba17874dd87a646128d0b99 Patch
https://git.kernel.org/stable/c/cf642904be39ae0d441dbdfa8f485e0a46260be4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Jan 2025, 15:46

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: platform: allegro-dvt: Se solucionó una posible pérdida de memoria en allocate_buffers_internal(). El búfer en el bucle debe liberarse en la ruta de excepción; de lo contrario, puede haber una pérdida de memoria aquí. Para mitigar esto, libere el búfer cuando falle allegro_alloc_buffer.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0f514068fbc5d4d189c817adc7c4e32cffdc2e47 - () https://git.kernel.org/stable/c/0f514068fbc5d4d189c817adc7c4e32cffdc2e47 - Patch
References () https://git.kernel.org/stable/c/17e5613666209be4e5be1f1894f1a6014a8a0658 - () https://git.kernel.org/stable/c/17e5613666209be4e5be1f1894f1a6014a8a0658 - Patch
References () https://git.kernel.org/stable/c/64f72a738864b506ab50b4a6cb3ce3c3e04b71af - () https://git.kernel.org/stable/c/64f72a738864b506ab50b4a6cb3ce3c3e04b71af - Patch
References () https://git.kernel.org/stable/c/6712a28a4f923ffdf51cff267ad05a634ee1babc - () https://git.kernel.org/stable/c/6712a28a4f923ffdf51cff267ad05a634ee1babc - Patch
References () https://git.kernel.org/stable/c/74a65313578b35e1239966adfa7ac2bdd60caf00 - () https://git.kernel.org/stable/c/74a65313578b35e1239966adfa7ac2bdd60caf00 - Patch
References () https://git.kernel.org/stable/c/891b5790bee8fc6ddba17874dd87a646128d0b99 - () https://git.kernel.org/stable/c/891b5790bee8fc6ddba17874dd87a646128d0b99 - Patch
References () https://git.kernel.org/stable/c/cf642904be39ae0d441dbdfa8f485e0a46260be4 - () https://git.kernel.org/stable/c/cf642904be39ae0d441dbdfa8f485e0a46260be4 - Patch

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-01-14 15:46

NVD link : CVE-2024-56572

Mitre link : CVE-2024-56572

CVE.ORG link : CVE-2024-56572

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime