CVE-2024-27076: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak

Q: What is the severity of CVE-2024-27076?

CVE-2024-27076 is categorized as a medium severity vulnerability in the Linux kernel.

Q: How do I fix CVE-2024-27076?

To fix CVE-2024-27076, upgrade to the patched versions of the Linux kernel that address this vulnerability.

Q: What versions of the Linux kernel are affected by CVE-2024-27076?

CVE-2024-27076 affects multiple versions of the Linux kernel, including versions from 5.4 up to 6.8.

Q: What is the nature of the vulnerability in CVE-2024-27076?

CVE-2024-27076 involves a memory leak in the v4l2_ctrl_handler within the Linux kernel's media framework.

Q: Is there a specific package for Debian users regarding CVE-2024-27076?

Yes, Debian users should look for updates to the 'linux' package that address CVE-2024-27076.

Published May 1, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

media: imx: csc/scaler: fix v4l2ctrlhandler memory leak

Free the memory allocated in v4l2ctrlhandlerinit on release.

Affected Software

12 affected componentsFixes available

Linux Linux kernel>=5.4<5.4.273

Linux Linux kernel>=5.5<5.10.214

Linux Linux kernel>=5.11<5.15.153

Linux Linux kernel>=5.16<6.1.83

Linux Linux kernel>=6.2<6.6.23

Linux Linux kernel>=6.7<6.7.11

Linux Linux kernel>=6.8<6.8.2

Debian Debian Linux=10.0

debian/linux<6.1.85-1

6.1.85-1

debian/linux<6.7.12-1

6.7.12-1

debian/linux<6.7.12-1

6.7.12-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.85-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.7.12-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1

Event History

May 1, 2024

CVE Published

via MITRE·01:04 PM

Data Sourced

via MITRE·01:04 PM

Description

Data Sourced

via NVD·01:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·01:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-5681

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-3842-1

Frequently Asked Questions

What is the severity of CVE-2024-27076?

CVE-2024-27076 is categorized as a medium severity vulnerability in the Linux kernel.

How do I fix CVE-2024-27076?

To fix CVE-2024-27076, upgrade to the patched versions of the Linux kernel that address this vulnerability.

What versions of the Linux kernel are affected by CVE-2024-27076?

CVE-2024-27076 affects multiple versions of the Linux kernel, including versions from 5.4 up to 6.8.

What is the nature of the vulnerability in CVE-2024-27076?

CVE-2024-27076 involves a memory leak in the v4l2_ctrl_handler within the Linux kernel's media framework.

Is there a specific package for Debian users regarding CVE-2024-27076?

Yes, Debian users should look for updates to the 'linux' package that address CVE-2024-27076.

CVE-2024-27076: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-27076?

How do I fix CVE-2024-27076?

What versions of the Linux kernel are affected by CVE-2024-27076?

What is the nature of the vulnerability in CVE-2024-27076?

Is there a specific package for Debian users regarding CVE-2024-27076?

Company

Resources

Contact