CVE-2024-56705

media: atomisp: Add check for rgby_data memory allocation failure

State
Published
Severity
Not scored
Published
Dec 28, 2024
Updated
May 11, 2026
Reserved
Dec 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: atomisp: Add check for rgby_data memory allocation failure

In ia_css_3a_statistics_allocate(), there is no check on the allocation result of the rgby_data memory. If rgby_data is not successfully allocated, it may trigger the assert(host_stats->rgby_data) assertion in ia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a49d25364dfb9f8a64037488a39ab1f56c5fa419 to before 51b8dc5163d2ff2bf04019f8bf7e3bd0e75bb654Affected
  • ad85094b293e40e7a2f831b0311a389d952ebd5e to before 0c24b82bc4d12c6a58ceacbf2598cd4df63abf9aAffected
  • ad85094b293e40e7a2f831b0311a389d952ebd5e to before 4676e50444046b498555b849e6080a5c78cdda9bAffected
  • ad85094b293e40e7a2f831b0311a389d952ebd5e to before 02a97d9d7ff605fa4a1f908d1bd3ad8573234b61Affected
  • ad85094b293e40e7a2f831b0311a389d952ebd5e to before 8066badaf7463194473fb4be19dbe50b11969aa0Affected
  • ad85094b293e40e7a2f831b0311a389d952ebd5e to before 74aa783682c4d78c69d87898e40c78df1fec204eAffected
  • ad85094b293e40e7a2f831b0311a389d952ebd5e to before 0c25ab93f2878cab07d37ca5afd302283201e5afAffected
  • ad85094b293e40e7a2f831b0311a389d952ebd5e to before ed61c59139509f76d3592683c90dc3fdc6e23cd6Affected
LinuxLinux
  • 4.12Affected
  • 5.8Affected
  • before 4.12Not affected
  • 4.18 to before 5.8Not affected
  • 5.10.231 through 5.10.*Not affected
  • 5.15.174 through 5.15.*Not affected
  • 6.1.120 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.