CVE-2024-27073

media: ttpci: fix two memleaks in budget_av_attach

State: Published
Severity: 7.8 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: ttpci: fix two memleaks in budget_av_attach

When saa7146_register_device and saa7146_vv_init fails, budget_av_attach should free the resources it allocates, like the error-handling of ttpci_budget_init does. Besides, there are two fixme comment refers to such deallocations.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before af37aed04997e644f7e1b52b696b62dcae3cc016Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 910363473e4bf97da3c350e08d915546dd6cc30bAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 24e51d6eb578b82ff292927f14b9f5ec05a46bebAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 55ca0c7eae8499bb96f4e5d9b26af95e89c4e6a0Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7393c681f9aa05ffe2385e8716989565eed2fe06Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1597cd1a88cfcdc4bf8b1b44cd458fed9a5a5d63Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 656b8cc123d7635dd399d9f02594f27aa797ac3cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d0b07f712bf61e1a3cf23c87c663791c42e50837Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.273 through 5.4.Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before af37aed04997e644f7e1b52b696b62dcae3cc016Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 910363473e4bf97da3c350e08d915546dd6cc30bAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 24e51d6eb578b82ff292927f14b9f5ec05a46bebAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 55ca0c7eae8499bb96f4e5d9b26af95e89c4e6a0Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7393c681f9aa05ffe2385e8716989565eed2fe06Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1597cd1a88cfcdc4bf8b1b44cd458fed9a5a5d63Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 656b8cc123d7635dd399d9f02594f27aa797ac3cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d0b07f712bf61e1a3cf23c87c663791c42e50837Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.273 through 5.4.*Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.