CVE-2024-56746

low-risk
Published 2024-12-29

In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() When information such as info->screen_base is not ready, calling sh7760fb_free_mem() does not release memory correctly. Call dma_free_coherent() instead.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (10)

Patch https://git.kernel.org/stable/c/0d3fb3b3e9d66f7b6346e3b90bc0ff48683539ce
Patch https://git.kernel.org/stable/c/29216bb390e36daeebef66abaa02d9751330252b
Patch https://git.kernel.org/stable/c/3dd9df8e5f34c6fc4217a7498c1fb3c352d4afc2
Patch https://git.kernel.org/stable/c/40f4326ed05a3b3537556ff2a844958b9e779a98
Patch https://git.kernel.org/stable/c/bad37309c8b8bf1cfc893750df0951a804009ca0
Patch https://git.kernel.org/stable/c/d10cd53e5a7fb3b7c6f83d4d9a5ea1d97a3ed9a5
Patch https://git.kernel.org/stable/c/d48cbfa90dce506030151915fa3346d67f964af4
Patch https://git.kernel.org/stable/c/f4fbd70e15fafe36a7583954ce189aaf5536aeec
Patch https://git.kernel.org/stable/c/f89d17ae2ac42931be2a0153fecbf8533280c927
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal