CVE-2024-27077

media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity

The entity->name (i.e. name) is allocated in v4l2_m2m_register_entity
but isn't freed in its following error-handling paths. This patch
adds such deallocation to prevent memleak of entity->name.

En el kernel de Linux, se resolvió la siguiente vulnerabilidad: medio: v4l2-mem2mem: corrige una fuga de mem en v4l2_m2m_register_entity La entidad->nombre (es decir, nombre) se asigna en v4l2_m2m_register_entity pero no se libera en las siguientes rutas de manejo de errores. Este parche agrega dicha desasignación para evitar la fuga de memoria de entidad->nombre.

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-02-19 CVE Reserved
2024-05-01 CVE Published
2024-05-02 EPSS Updated
2024-09-11 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (12)

URL	Tag	Source
https://git.kernel.org/stable/c/be2fff656322e82f215730839063c2c2ca73d14b	Vuln. Introduced
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333	2024-03-26
https://git.kernel.org/stable/c/0175f2d34c85744f9ad6554f696cf0afb5bd04e4	2024-03-26
https://git.kernel.org/stable/c/afd2a82fe300032f63f8be5d6cd6981e75f8bbf2	2024-03-26
https://git.kernel.org/stable/c/dc866b69cc51af9b8509b4731b8ce2a4950cd0ef	2024-03-26
https://git.kernel.org/stable/c/0c9550b032de48d6a7fa6a4ddc09699d64d9300d	2024-03-26
https://git.kernel.org/stable/c/90029b9c979b60de5cb2b70ade4bbf61d561bc5d	2024-03-26
https://git.kernel.org/stable/c/5dc319cc3c4f7b74f7dfba349aa26f87efb52458	2024-03-26
https://git.kernel.org/stable/c/9c23ef30e840fedc66948299509f6c2777c9cf4f	2024-03-26
https://git.kernel.org/stable/c/8f94b49a5b5d386c038e355bef6347298aabd211	2024-02-05

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 4.19.311 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 4.19.311"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 5.4.273 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 5.4.273"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 5.10.214 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 5.10.214"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 5.15.153 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 5.15.153"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 6.1.83 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 6.1.83"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 6.6.23 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 6.6.23"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 6.7.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 6.7.11"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 6.8.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 6.8.2"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 6.9 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 6.9"		en		Affected