CVE-2024-53202: firmware_loader: Fix possible resource leak in fw_log_firmware_info()
In the Linux kernel, the following vulnerability has been resolved:
firmwareloader: Fix possible resource leak in fwlogfirmwareinfo()
The alg instance should be released under the exception path, otherwise there may be resource leak here.
To mitigate this, free the alg instance with cryptofreeshash when kmalloc fails.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53202?
CVE-2024-53202 has a moderate severity level due to potential resource leaks that can impact system performance.
How do I fix CVE-2024-53202?
To fix CVE-2024-53202, update to the patched versions provided by your Linux distribution, such as linux 5.10.223-1 or later.
Which Linux kernel versions are affected by CVE-2024-53202?
CVE-2024-53202 affects Linux kernel versions from 6.4 to 6.6.64, 6.7 to 6.11.11, and 6.12.x up to 6.12.2.
Is CVE-2024-53202 a remote exploit vulnerability?
CVE-2024-53202 is not classified as a remote exploit vulnerability, but it can lead to resource leaks if exploited.
What component of the Linux kernel does CVE-2024-53202 impact?
CVE-2024-53202 impacts the firmware loader component of the Linux kernel.