CVE-2024-35829

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Missing Release of Memory after Effective Lifetime pada debian linux, linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix a memleak in lima_heap_alloc When lima_vm_map_bo fails, the resources need to be deallocated, or there will be memleaks.

Rincian

Terbit di NVD

17 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/04ae3eb470e52a3c41babe85ff8cee195e4dcbea patch
• https://git.kernel.org/stable/c/4ab14eccf5578af1dd5668a5f2d771df27683cab patch
• https://git.kernel.org/stable/c/746606d37d662c70ae1379fc658ee9c65f06880f patch
• https://git.kernel.org/stable/c/8e25c0ee5665e8a768b8e21445db1f86e9156eb7 patch
• https://git.kernel.org/stable/c/ec6bb037e4a35fcbb5cd7bc78242d034ed893fcd patch
• https://git.kernel.org/stable/c/f2e80ac9344aebbff576453d5c0290b332e187ed patch
• https://git.kernel.org/stable/c/f6d51a91b41704704e395de6839c667b0f810bbf patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list · advisory pihak ketiga