CVE-2024-56572

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()

The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here.

To mitigate this, free the buffer when allegro_alloc_buffer fails.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf20387dfd065693ba7ea2788a2f893bf653c9cb8 < cf642904be39ae0d441dbdfa8f485e0a46260be4affected
LinuxLinuxf20387dfd065693ba7ea2788a2f893bf653c9cb8 < 74a65313578b35e1239966adfa7ac2bdd60caf00affected
LinuxLinuxf20387dfd065693ba7ea2788a2f893bf653c9cb8 < 64f72a738864b506ab50b4a6cb3ce3c3e04b71afaffected
LinuxLinuxf20387dfd065693ba7ea2788a2f893bf653c9cb8 < 17e5613666209be4e5be1f1894f1a6014a8a0658affected
LinuxLinuxf20387dfd065693ba7ea2788a2f893bf653c9cb8 < 6712a28a4f923ffdf51cff267ad05a634ee1babcaffected
LinuxLinuxf20387dfd065693ba7ea2788a2f893bf653c9cb8 < 891b5790bee8fc6ddba17874dd87a646128d0b99affected
LinuxLinuxf20387dfd065693ba7ea2788a2f893bf653c9cb8 < 0f514068fbc5d4d189c817adc7c4e32cffdc2e47affected
LinuxLinux5.3affected
LinuxLinux0 < 5.3unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.12.4 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References