Riskcovery

CVE-2024-53202

firmware_loader: Fix possible resource leak in fw_log_firmware_info()

State
Published
Severity
5.5 Medium
Published
Dec 27, 2024
Updated
May 11, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware_loader: Fix possible resource leak in fw_log_firmware_info()

The alg instance should be released under the exception path, otherwise there may be resource leak here.

To mitigate this, free the alg instance with crypto_free_shash when kmalloc fails.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to before 789a72498d32f88d24371c10985aceb46397056cAffected
  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to before eb5d67d00ad17a5bd0920f455160dc2ccbd2dc78Affected
  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to before f380f895dbb2a11d62ca6df9e82d995f4bc26b84Affected
  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to before 369a9c046c2fdfe037f05b43b84c386bdbccc103Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.