CVE-2024-56572

media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()

State: Published
Severity: 3.3 Low
Published: Dec 27, 2024
Updated: May 11, 2026
Reserved: Dec 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()

The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here.

To mitigate this, free the buffer when allegro_alloc_buffer fails.

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before cf642904be39ae0d441dbdfa8f485e0a46260be4Affected f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 74a65313578b35e1239966adfa7ac2bdd60caf00Affected f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 64f72a738864b506ab50b4a6cb3ce3c3e04b71afAffected f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 17e5613666209be4e5be1f1894f1a6014a8a0658Affected f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 6712a28a4f923ffdf51cff267ad05a634ee1babcAffected f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 891b5790bee8fc6ddba17874dd87a646128d0b99Affected f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 0f514068fbc5d4d189c817adc7c4e32cffdc2e47Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.12.4 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before cf642904be39ae0d441dbdfa8f485e0a46260be4Affected
f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 74a65313578b35e1239966adfa7ac2bdd60caf00Affected
f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 64f72a738864b506ab50b4a6cb3ce3c3e04b71afAffected
f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 17e5613666209be4e5be1f1894f1a6014a8a0658Affected
f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 6712a28a4f923ffdf51cff267ad05a634ee1babcAffected
f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 891b5790bee8fc6ddba17874dd87a646128d0b99Affected
f20387dfd065693ba7ea2788a2f893bf653c9cb8 to before 0f514068fbc5d4d189c817adc7c4e32cffdc2e47Affected

LinuxLinux

5.3Affected
before 5.3Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.12.4 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.