First published: Fri Dec 27 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() If we fail to allocate memory for cb_data by kmalloc, the memory allocation for eve_data is never freed, add the missing kfree() in the error handling path.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.15-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-56546 has a medium severity rating due to the potential for memory leaks in the Linux kernel.
To mitigate CVE-2024-56546, upgrade to the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1 of the Linux package.
CVE-2024-56546 affects the Linux kernel prior to the fixed versions specified in the security patches.
The vulnerability in CVE-2024-56546 pertains to memory allocation failure not being handled correctly, leading to potential memory leaks.
As of now, there is no known public exploit specifically targeting CVE-2024-56546.