CVE-2024-43871

devres: Fix memory leakage caused by driver API devm_free_percpu()

State: Published
Severity: Not scored
Published: Aug 21, 2024
Updated: Oct 15, 2026
Reserved: Aug 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 700e8abd65b10792b2f179ce4e858f2ca2880f85Affected ff86aae3b4112b85d2231c23bccbc49589df1c06 to before b044588a16a978cd891cb3d665dd7ae06850d5bfAffected ff86aae3b4112b85d2231c23bccbc49589df1c06 to before ef56dcdca8f2a53abc3a83d388b8336447533d85Affected ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 3047f99caec240a88ccd06197af2868da1af6a96Affected ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 3dcd0673e47664bc6c719ad47dadac6d55d5950dAffected ff86aae3b4112b85d2231c23bccbc49589df1c06 to before b67552d7c61f52f1271031adfa7834545ae99701Affected ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 95065edb8ebb27771d5f1e898eef6ab43dc6c87cAffected ff86aae3b4112b85d2231c23bccbc49589df1c06 to before bd50a974097bb82d52a458bd3ee39fb723129a0cAffected
LinuxLinux	4.10Affected before 4.10Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 700e8abd65b10792b2f179ce4e858f2ca2880f85Affected
ff86aae3b4112b85d2231c23bccbc49589df1c06 to before b044588a16a978cd891cb3d665dd7ae06850d5bfAffected
ff86aae3b4112b85d2231c23bccbc49589df1c06 to before ef56dcdca8f2a53abc3a83d388b8336447533d85Affected
ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 3047f99caec240a88ccd06197af2868da1af6a96Affected
ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 3dcd0673e47664bc6c719ad47dadac6d55d5950dAffected
ff86aae3b4112b85d2231c23bccbc49589df1c06 to before b67552d7c61f52f1271031adfa7834545ae99701Affected
ff86aae3b4112b85d2231c23bccbc49589df1c06 to before 95065edb8ebb27771d5f1e898eef6ab43dc6c87cAffected
ff86aae3b4112b85d2231c23bccbc49589df1c06 to before bd50a974097bb82d52a458bd3ee39fb723129a0cAffected

LinuxLinux

4.10Affected
before 4.10Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.