CVE-2024-57980

media: uvcvideo: Fix double free in error path

State: Published
Severity: Not scored
Published: Feb 27, 2025
Updated: Oct 15, 2026
Reserved: Feb 27, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Fix double free in error path

If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. This results in the kfree() call in uvc_status_cleanup() trying to double-free the memory. Fix it by resetting the dev->status pointer to NULL after freeing it.

Reviewed by: Ricardo Ribalda <ribalda@chromium.org>

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a31a4055473bf0a7b2b06cb2262347200d0711e1 to before d6e5ba2516c5bef87c1fcb8189b6f3cad7c64b2dAffected a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 87522ef165e5b6de8ef98cc318f3335166a1512cAffected a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 3ba8884a56a3eb97c22f0ce0e4dd410d4ca4c277Affected a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 9232719ac9ce4d5c213cebda23d72aec3e1c4c0dAffected a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 6c36dcd662ec5276782838660f8533a7cb26be49Affected a31a4055473bf0a7b2b06cb2262347200d0711e1 to before d1f8e69eec91d5a75ef079778a5d0151db2a7f22Affected a31a4055473bf0a7b2b06cb2262347200d0711e1 to before d8e63dd7b6683969d3d47c7b8e9635f96d554ad4Affected a31a4055473bf0a7b2b06cb2262347200d0711e1 to before c6ef3a7fa97ec823a1e1af9085cf13db9f7b3bacAffected
LinuxLinux	2.6.28Affected before 2.6.28Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.76 through 6.6.Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

a31a4055473bf0a7b2b06cb2262347200d0711e1 to before d6e5ba2516c5bef87c1fcb8189b6f3cad7c64b2dAffected
a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 87522ef165e5b6de8ef98cc318f3335166a1512cAffected
a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 3ba8884a56a3eb97c22f0ce0e4dd410d4ca4c277Affected
a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 9232719ac9ce4d5c213cebda23d72aec3e1c4c0dAffected
a31a4055473bf0a7b2b06cb2262347200d0711e1 to before 6c36dcd662ec5276782838660f8533a7cb26be49Affected
a31a4055473bf0a7b2b06cb2262347200d0711e1 to before d1f8e69eec91d5a75ef079778a5d0151db2a7f22Affected
a31a4055473bf0a7b2b06cb2262347200d0711e1 to before d8e63dd7b6683969d3d47c7b8e9635f96d554ad4Affected
a31a4055473bf0a7b2b06cb2262347200d0711e1 to before c6ef3a7fa97ec823a1e1af9085cf13db9f7b3bacAffected

LinuxLinux

2.6.28Affected
before 2.6.28Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.76 through 6.6.*Not affected
6.12.13 through 6.12.*Not affected
6.13.2 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.