CVE-2024-53076

Summary

In the Linux kernel, the following vulnerability has been resolved:

iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()

If per_time_scales[i] or per_time_gains[i] kcalloc fails in the for loop of iio_gts_build_avail_scale_table(), the err_free_out will fail to call kfree() each time when i is reduced to 0, so all the per_time_scales[0] and per_time_gains[0] will not be freed, which will cause memory leaks.

Fix it by checking if i >= 0.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux38416c28e16890b52fdd5eb73479299ec3f062f3 < 62c11896683129790b8f5ab6eb7e695818b0b723affected
LinuxLinux38416c28e16890b52fdd5eb73479299ec3f062f3 < b304362ce836968b803e5d4c5f84dcb51a7bf0f2affected
LinuxLinux38416c28e16890b52fdd5eb73479299ec3f062f3 < 369f05688911b05216cfcd6ca74473bec87948d7affected
LinuxLinux6.4affected
LinuxLinux0 < 6.4unaffected
LinuxLinux6.6.60 <= 6.6.*unaffected
LinuxLinux6.11.7 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References