CVE-2024-26829: media: ir_toy: fix a memleak in irtoy_tx
In the Linux kernel, the following vulnerability has been resolved:
media: irtoy: fix a memleak in irtoytx
When irtoycommand fails, buf should be freed since it is allocated by irtoytx, or there is a memleak.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
In the irtoy_tx error path, free the buf allocation when irtoy_command fails to prevent a memory leak.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26829?
CVE-2024-26829 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26829?
To resolve CVE-2024-26829, update the Linux kernel to one of the fixed versions listed in the advisory.
Which systems are affected by CVE-2024-26829?
CVE-2024-26829 affects various versions of the Linux kernel, including versions up to 5.10.210 and between certain versions of 5.15.x and 6.8.x.
What type of vulnerability is CVE-2024-26829?
CVE-2024-26829 is a memory leak vulnerability related to the IR Toy driver in the Linux kernel.
Has CVE-2024-26829 been patched?
Yes, CVE-2024-26829 has been patched in the latest versions of the Linux kernel.