CVE-2024-27077: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
In the Linux kernel, the following vulnerability has been resolved:
media: v4l2-mem2mem: fix a memleak in v4l2m2mregisterentity
The entity->name (i.e. name) is allocated in v4l2m2mregisterentity but isn't freed in its following error-handling paths. This patch adds such deallocation to prevent memleak of entity->name.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27077?
CVE-2024-27077 is classified with a medium severity level due to potential memory leaks in the Linux kernel.
How do I fix CVE-2024-27077?
To fix CVE-2024-27077, update the Linux kernel to a version that includes the patch, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which Linux kernel versions are affected by CVE-2024-27077?
CVE-2024-27077 affects Linux kernel versions ranging from 4.19 to 6.8, including multiple intermediate versions.
Is CVE-2024-27077 specific to any Linux distribution?
CVE-2024-27077 is primarily associated with the Linux kernel and impacts various distributions that use affected versions, including Debian.
What components of the Linux kernel are impacted by CVE-2024-27077?
CVE-2024-27077 impacts the media subsystem, specifically the v4l2-mem2mem module related to memory management.