Orta CVSS 5.5

CVE-2024-27074: Linux Kernel: güvenlik açığı

Yayın: 1 Mayıs 2024 16:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without a deallocation thereafter. After the following call chain: saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go) go is freed and thus bounce is leaked.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,29 (yüzdelik 22)
CWE: CWE-401
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	3.10	—	4.19.311
linux-linux-kernel	4.20	—	5.4.273
linux-linux-kernel	5.5	—	5.10.214
linux-linux-kernel	5.11	—	5.15.153
linux-linux-kernel	5.16	—	6.1.83
linux-linux-kernel	6.2	—	6.6.23
linux-linux-kernel	6.7	—	6.7.11
linux-linux-kernel	6.8	—	6.8.2
debian-debian-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları