CVE-2024-41025

Katalog CVE

CVSS 5.5 · Medium EPSS 0,29%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the name as part of the init IOCTL call. This name needs to be copied to kernel for which memory is allocated. This memory is never freed which might result in memory leak. Free the memory when it is not needed.

Rincian

Terbit di NVD

29 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2 patch
• https://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15e patch
• https://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64 patch