CVE-2024-26829

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: ir_toy: fix a memleak in irtoy_tx

When irtoy_command fails, buf should be freed since it is allocated by irtoy_tx, or there is a memleak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa4ac45aff8d38c64104aec21c6529747d94ae75a < 207557e393a135c1b6fe1df7cc0741d2c1789fffaffected
LinuxLinux4114978dcd24e72415276bba60ff4ff355970bbc < be76ad74a43f90f340f9f479e6b04f02125f6aefaffected
LinuxLinux4114978dcd24e72415276bba60ff4ff355970bbc < 7219a692ffc00089015ada33b85b334d1a4b6e8eaffected
LinuxLinux4114978dcd24e72415276bba60ff4ff355970bbc < b37259448bbc70af1d0e52a9dd5559a9c29c9621affected
LinuxLinux4114978dcd24e72415276bba60ff4ff355970bbc < dc9ceb90c4b42c6e5c6757df1d6257110433788eaffected
LinuxLinux5.15.54 < 5.15.149affected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux5.15.149 <= 5.15.*unaffected
LinuxLinux6.1.79 <= 6.1.*unaffected
LinuxLinux6.6.18 <= 6.6.*unaffected
LinuxLinux6.7.6 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References