CVE-2024-27078

low-risk
Published 2024-05-01

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpg_alloc In tpg_alloc, resources should be deallocated in each and every error-handling paths, since they are allocated in for statements. Otherwise there would be memleaks because tpg_free is called only when tpg_alloc return 0.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (20)

Patch https://git.kernel.org/stable/c/0de691ff547d86dd54c24b40a81f9c925df8dd77
Patch https://git.kernel.org/stable/c/31096da07933598da8522c54bd007376fb152a09
Patch https://git.kernel.org/stable/c/4c86c772fef06f5d7a66151bac42366825db0941
Patch https://git.kernel.org/stable/c/622b1cf38521569869c8f7b9fbe9e4f1a289add7
Patch https://git.kernel.org/stable/c/6bf5c2fade8ed53b2d26fa9875e5b04f36c7145d
Patch https://git.kernel.org/stable/c/770a57922ce36a8476c43f7400b6501c554ea511
Patch https://git.kernel.org/stable/c/8269ab16415f2065cd792c49b0475543936cbd79
Patch https://git.kernel.org/stable/c/8cf9c5051076e0eb958f4361d50d8b0c3ee6691c
Patch https://git.kernel.org/stable/c/94303a06e1852a366e9671fff46d19459f88cb28
Patch https://git.kernel.org/stable/c/0de691ff547d86dd54c24b40a81f9c925df8dd77
Patch https://git.kernel.org/stable/c/31096da07933598da8522c54bd007376fb152a09
Patch https://git.kernel.org/stable/c/4c86c772fef06f5d7a66151bac42366825db0941
Patch https://git.kernel.org/stable/c/622b1cf38521569869c8f7b9fbe9e4f1a289add7
Patch https://git.kernel.org/stable/c/6bf5c2fade8ed53b2d26fa9875e5b04f36c7145d
Patch https://git.kernel.org/stable/c/770a57922ce36a8476c43f7400b6501c554ea511
Patch https://git.kernel.org/stable/c/8269ab16415f2065cd792c49b0475543936cbd79
Patch https://git.kernel.org/stable/c/8cf9c5051076e0eb958f4361d50d8b0c3ee6691c
Patch https://git.kernel.org/stable/c/94303a06e1852a366e9671fff46d19459f88cb28
Mailing List https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Mailing List https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal