CVE-2024-27074

media: go7007: fix a memleak in go7007_load_encoder

State: Published
Severity: Not scored
Published: May 1, 2024
Updated: Oct 15, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: go7007: fix a memleak in go7007_load_encoder

In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without a deallocation thereafter. After the following call chain:

saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go)

go is freed and thus bounce is leaked.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 7f11dd3d165b178e738fe73dfeea513e383bedb5Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 291cda0b805fc0d6e90d201710311630c8667159Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before b49fe84c6cefcc1c2336d793b53442e716c95073Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 790fa2c04dfb9f095ec372bf17909424d6e864b3Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before e04d15c8bb3e111dd69f98894acd92d63e87aac3Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before d43988a23c32588ccd0c74219637afb96cd78661Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 7405a0d4442792988e9ae834e7d84f9d163731a4Affected 95ef39403f890360a3e48fe550d8e8e5d088ad74 to before b9b683844b01d171a72b9c0419a2d760d946ee12Affected
LinuxLinux	3.10Affected before 3.10Not affected 4.19.311 through 4.19.Not affected 5.4.273 through 5.4.Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 7f11dd3d165b178e738fe73dfeea513e383bedb5Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 291cda0b805fc0d6e90d201710311630c8667159Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before b49fe84c6cefcc1c2336d793b53442e716c95073Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 790fa2c04dfb9f095ec372bf17909424d6e864b3Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before e04d15c8bb3e111dd69f98894acd92d63e87aac3Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before d43988a23c32588ccd0c74219637afb96cd78661Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before 7405a0d4442792988e9ae834e7d84f9d163731a4Affected
95ef39403f890360a3e48fe550d8e8e5d088ad74 to before b9b683844b01d171a72b9c0419a2d760d946ee12Affected

LinuxLinux

3.10Affected
before 3.10Not affected
4.19.311 through 4.19.*Not affected
5.4.273 through 5.4.*Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.