CVE-2024-27076

MEDIUM

Linux Kernel - Memory Leak

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak Free the memory allocated in v4l2_ctrl_handler_init on release.

References (9)

[Patch] https://git.kernel.org/stable/c/42492b00156c03a79fd4851190aa63045d6a15ce

[Patch] https://git.kernel.org/stable/c/4797a3dd46f220e6d83daf54d70c5b33db6deb01

[Patch] https://git.kernel.org/stable/c/5d9fe604bf9b5b09d2215225df55f22a4cbbc684

[Patch] https://git.kernel.org/stable/c/6c92224721a439d6350db5933a1060768dcd565e

[Patch] https://git.kernel.org/stable/c/8c2e4efe1278cd2b230cdbf90a6cefbf00acc282

[Patch] https://git.kernel.org/stable/c/8df9a3c7044b847e9c4dc7e683fd64c6b873f328

[Patch] https://git.kernel.org/stable/c/b1d0eebaf87cc9ccd05f779ec4a0589f95d6c18b

[Patch] https://git.kernel.org/stable/c/d164ddc21e986dd9ad614b4b01746e5457aeb24f

[Mailing List] https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 1.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (9)

linux/linux_kernel < 5.4.273

debian/debian_linux

linux/Kernel < 5.4.273linux

linux/Kernel < 5.10.214linux

linux/Kernel < 5.15.153linux

linux/Kernel < 6.1.83linux

linux/Kernel < 6.6.23linux

linux/Kernel < 6.7.11linux

linux/Kernel < 6.8.2linux

Timeline

Published May 01, 2024

Tracked Since Feb 18, 2026