Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 5 min 173 bronnen 2 kritiek 37 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2024-27074

MEDIUM · 5.5 CVSS Gepubliceerd: CWE-401

Beschrijving

In the Linux kernel, the following vulnerability has been resolved:

media: go7007: fix a memleak in go7007_load_encoder

In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without
a deallocation thereafter. After the following call chain:

saa7134_go7007_init
|-> go7007_boot_encoder
|-> go7007_load_encoder
|-> kfree(go)

go is freed and thus bounce is leaked.

Vendors

Linux Debian

Affected products

Linux Kernel Debian Linux

References