Riskcovery

CVE-2024-56746

fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

State
Published
Severity
3.3 Low
Published
Dec 29, 2024
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

When information such as info->screen_base is not ready, calling sh7760fb_free_mem() does not release memory correctly. Call dma_free_coherent() instead.

Scores

CVSSScoreVectorSource
3.13.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before 0d3fb3b3e9d66f7b6346e3b90bc0ff48683539ceAffected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before d48cbfa90dce506030151915fa3346d67f964af4Affected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before 29216bb390e36daeebef66abaa02d9751330252bAffected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before f4fbd70e15fafe36a7583954ce189aaf5536aeecAffected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before 40f4326ed05a3b3537556ff2a844958b9e779a98Affected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before 3dd9df8e5f34c6fc4217a7498c1fb3c352d4afc2Affected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before d10cd53e5a7fb3b7c6f83d4d9a5ea1d97a3ed9a5Affected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before bad37309c8b8bf1cfc893750df0951a804009ca0Affected
  • 4a25e41831ee851c1365d8b41decc22493b18e6d to before f89d17ae2ac42931be2a0153fecbf8533280c927Affected
LinuxLinux
  • 2.6.27Affected
  • before 2.6.27Not affected
  • 4.19.325 through 4.19.*Not affected
  • 5.4.287 through 5.4.*Not affected
  • 5.10.231 through 5.10.*Not affected
  • 5.15.174 through 5.15.*Not affected
  • 6.1.120 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.