CVE-2024-27077

media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity

State
Published
Severity
Not scored
Published
May 1, 2024
Updated
Oct 15, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity

The entity->name (i.e. name) is allocated in v4l2_m2m_register_entity but isn't freed in its following error-handling paths. This patch adds such deallocation to prevent memleak of entity->name.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • be2fff656322e82f215730839063c2c2ca73d14b to before 3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333Affected
  • be2fff656322e82f215730839063c2c2ca73d14b to before 0175f2d34c85744f9ad6554f696cf0afb5bd04e4Affected
  • be2fff656322e82f215730839063c2c2ca73d14b to before afd2a82fe300032f63f8be5d6cd6981e75f8bbf2Affected
  • be2fff656322e82f215730839063c2c2ca73d14b to before dc866b69cc51af9b8509b4731b8ce2a4950cd0efAffected
  • be2fff656322e82f215730839063c2c2ca73d14b to before 0c9550b032de48d6a7fa6a4ddc09699d64d9300dAffected
  • be2fff656322e82f215730839063c2c2ca73d14b to before 90029b9c979b60de5cb2b70ade4bbf61d561bc5dAffected
  • be2fff656322e82f215730839063c2c2ca73d14b to before 5dc319cc3c4f7b74f7dfba349aa26f87efb52458Affected
  • be2fff656322e82f215730839063c2c2ca73d14b to before 9c23ef30e840fedc66948299509f6c2777c9cf4fAffected
  • be2fff656322e82f215730839063c2c2ca73d14b to before 8f94b49a5b5d386c038e355bef6347298aabd211Affected
LinuxLinux
  • 4.19Affected
  • before 4.19Not affected
  • 4.19.311 through 4.19.*Not affected
  • 5.4.273 through 5.4.*Not affected
  • 5.10.214 through 5.10.*Not affected
  • 5.15.153 through 5.15.*Not affected
  • 6.1.83 through 6.1.*Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.