CVE-2024-27074: media: go7007: fix a memleak in go7007_load_encoder
In the Linux kernel, the following vulnerability has been resolved:
media: go7007: fix a memleak in go7007loadencoder
In go7007loadencoder, bounce(i.e. go->bootfw), is allocated without a deallocation thereafter. After the following call chain:
saa7134go7007init |-> go7007bootencoder |-> go7007loadencoder |-> kfree(go)
go is freed and thus bounce is leaked.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27074?
The CVE-2024-27074 vulnerability is classified as a medium severity issue due to the potential memory leak that may affect system performance.
How do I fix CVE-2024-27074?
To address CVE-2024-27074, update the Linux kernel to a fixed version such as 5.10.223-1, 5.10.226-1, 6.1.123-1, or higher.
What systems are affected by CVE-2024-27074?
CVE-2024-27074 affects multiple versions of the Linux kernel across various distributions including Debian and other Linux systems based on kernel versions lower than 6.9.
What is the nature of the vulnerability in CVE-2024-27074?
CVE-2024-27074 is a memory leak vulnerability in the go7007_load_encoder function, which does not deallocate memory properly after allocation.
When was CVE-2024-27074 discovered?
CVE-2024-27074 was made public as part of updated security advisories addressing kernel vulnerabilities.