CVE-2024-53202

MEDIUM

Linux Kernel 6.4-6.6.63, 6.7-6.11.10, 6.12-6.12.1 - Resource Leak in Firmware Loader

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix possible resource leak in fw_log_firmware_info() The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with crypto_free_shash when kmalloc fails.

References (4)

Core 4

Core References

Patch

https://git.kernel.org/stable/c/789a72498d32f88d24371c10985aceb46397056c

Patch

https://git.kernel.org/stable/c/eb5d67d00ad17a5bd0920f455160dc2ccbd2dc78

Patch

https://git.kernel.org/stable/c/f380f895dbb2a11d62ca6df9e82d995f4bc26b84

Patch

https://git.kernel.org/stable/c/369a9c046c2fdfe037f05b43b84c386bdbccc103

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 12.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (14)

linux/Kernel 6.12.0 - 6.12.2linux

linux/Kernel 6.4.0 - 6.6.64linux

linux/Kernel 6.7.0 - 6.11.11linux

Linux/Linux < 6.4

Linux/Linux 02fe26f25325b547b7a31a65deb0326c04bb5174 - 369a9c046c2fdfe037f05b43b84c386bdbccc103

Linux/Linux 02fe26f25325b547b7a31a65deb0326c04bb5174 - 789a72498d32f88d24371c10985aceb46397056c

Linux/Linux 02fe26f25325b547b7a31a65deb0326c04bb5174 - eb5d67d00ad17a5bd0920f455160dc2ccbd2dc78

Linux/Linux 02fe26f25325b547b7a31a65deb0326c04bb5174 - f380f895dbb2a11d62ca6df9e82d995f4bc26b84

Linux/Linux 6.11.11 - 6.11.*

Linux/Linux 6.12.2 - 6.12.*

... and 4 more

Published Dec 27, 2024

Tracked Since Feb 18, 2026