CVE-2024-26829: media: ir_toy: fix a memleak in irtoy_tx
Published Apr 17, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
media: irtoy: fix a memleak in irtoytx
When irtoycommand fails, buf should be freed since it is allocated by irtoytx, or there is a memleak.
Affected Software
10 affected componentsFixes available
Linux Linux kernel<5.10.210
Linux Linux kernel>=5.15.54<5.15.149
Linux Linux kernel>=5.16<6.1.79
Linux Linux kernel>=6.2<6.6.18
Linux Linux kernel>=6.7<6.7.6
Linux Linux kernel=6.8-rc1
Linux Linux kernel=6.8-rc2
Linux Linux kernel=6.8-rc3
Linux Linux kernel=6.8-rc4
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Apr 17, 2024
CVE Published
via MITRE·10:03 AM
Data Sourced
via MITRE·10:03 AM
Description
Data Sourced
via NVD·10:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
May 7, 2024
Data Sourced
via Launchpad·08:29 PM
Description
May 3, 2025
Data Sourced
via Ubuntu·06:18 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-26829?
CVE-2024-26829 has been classified as a medium severity vulnerability in the Linux kernel.
2
How do I fix CVE-2024-26829?
To resolve CVE-2024-26829, update the Linux kernel to one of the fixed versions listed in the advisory.
3
Which systems are affected by CVE-2024-26829?
CVE-2024-26829 affects various versions of the Linux kernel, including versions up to 5.10.210 and between certain versions of 5.15.x and 6.8.x.
4
What type of vulnerability is CVE-2024-26829?
CVE-2024-26829 is a memory leak vulnerability related to the IR Toy driver in the Linux kernel.
5
Has CVE-2024-26829 been patched?
Yes, CVE-2024-26829 has been patched in the latest versions of the Linux kernel.