CVE-2024-56572

MEDIUM

Linux kernel - Memory Corruption

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here. To mitigate this, free the buffer when allegro_alloc_buffer fails.

References (8)

[Mailing List] https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

[Patch] https://git.kernel.org/stable/c/0f514068fbc5d4d189c817adc7c4e32cffdc2e47

[Patch] https://git.kernel.org/stable/c/17e5613666209be4e5be1f1894f1a6014a8a0658

[Patch] https://git.kernel.org/stable/c/64f72a738864b506ab50b4a6cb3ce3c3e04b71af

[Patch] https://git.kernel.org/stable/c/6712a28a4f923ffdf51cff267ad05a634ee1babc

[Patch] https://git.kernel.org/stable/c/74a65313578b35e1239966adfa7ac2bdd60caf00

[Patch] https://git.kernel.org/stable/c/891b5790bee8fc6ddba17874dd87a646128d0b99

[Patch] https://git.kernel.org/stable/c/cf642904be39ae0d441dbdfa8f485e0a46260be4

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 0.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (7)

linux/linux_kernel < 5.4.287

linux/Kernel < 5.4.287linux

linux/Kernel < 5.10.231linux

linux/Kernel < 5.15.174linux

linux/Kernel < 6.1.120linux

linux/Kernel < 6.6.64linux

linux/Kernel < 6.12.4linux

Timeline

Published Dec 27, 2024

Tracked Since Feb 18, 2026