CVE-2024-27068: thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error handling path
In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/mediatek/lvtsthermal: Fix a memory leak in an error handling path
If devmkrealloc() fails, then 'efuse' is leaking. So free it to avoid a leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27068?
CVE-2024-27068 has a medium severity rating due to the impact of a memory leak in error handling.
How do I fix CVE-2024-27068?
To resolve CVE-2024-27068, update the Linux kernel to a version that includes the fix, such as 5.10.223-1, 6.1.123-1, or 6.12.10-1.
Which Linux kernel versions are affected by CVE-2024-27068?
CVE-2024-27068 affects Linux kernel versions from 6.3 to 6.6.23, 6.7 to 6.7.11, and 6.8 to 6.8.2.
What components are involved with CVE-2024-27068?
CVE-2024-27068 involves the thermal drivers in the Linux kernel, specifically within the mediatek lvts_thermal module.
Is there a workaround for CVE-2024-27068?
There is no specific workaround for CVE-2024-27068; updating to a patched kernel version is recommended for mitigation.