CVE-2024-27073

media: ttpci: fix two memleaks in budget_av_attach

HIGH

7.8

CVSS Score

Published: May 1, 2024 at 01:04 PM UTC

Updated: August 5, 2026 at 12:04 PM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: media: ttpci: fix two memleaks in budget_av_attach When saa7146_register_device and saa7146_vv_init fails, budget_av_attach should free the resources it allocates, like the error-handling of ttpci_budget_init does. Besides, there are two fixme comment refers to such deallocations.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0

Linux Kernel · Linux

95%

2.6.12 ≤ v < 5.10.2142.6.12 ≤ v < 5.15.1532.6.12 ≤ v < 5.4.2732.6.12 ≤ v < 6.1.832.6.12 ≤ v < 6.6.232.6.12 ≤ v < 6.7.112.6.12 ≤ v < 6.8.22.6.12 ≤ v < 6.95.11 ≤ v < 5.15.1535.16 ≤ v < 6.1.835.5 ≤ v < 5.10.2146.2 ≤ v < 6.6.236.7 ≤ v < 6.7.116.8 ≤ v < 6.8.21da177e4c3f41524e886b7f1b8a0c1fc7321cac2 2.6.12

Vendor states this is fixed in 1597cd1a88cfcdc4bf8b1b44cd458fed9a5a5d63 (fixed)

Vendor states this is fixed in 24e51d6eb578b82ff292927f14b9f5ec05a46beb (fixed)

Vendor states this is fixed in 55ca0c7eae8499bb96f4e5d9b26af95e89c4e6a0 (fixed)

Vendor states this is fixed in 656b8cc123d7635dd399d9f02594f27aa797ac3c (fixed)

Vendor states this is fixed in 7393c681f9aa05ffe2385e8716989565eed2fe06 (fixed)

Vendor states this is fixed in 910363473e4bf97da3c350e08d915546dd6cc30b (fixed)

Vendor states this is fixed in af37aed04997e644f7e1b52b696b62dcae3cc016 (fixed)

Vendor states this is fixed in d0b07f712bf61e1a3cf23c87c663791c42e50837 (fixed)

Vendor states this is fixed in 2.6.12 (unaffected)

Vendor states this is fixed in 5.10.214 (unaffected)

Vendor states this is fixed in 5.15.153 (unaffected)

Vendor states this is fixed in 5.4.273 (unaffected)

Vendor states this is fixed in 6.1.83 (unaffected)

Vendor states this is fixed in 6.6.23 (unaffected)

Vendor states this is fixed in 6.7.11 (unaffected)

Vendor states this is fixed in 6.8.2 (unaffected)

Vendor states this is fixed in 6.9 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references