CVE-2024-40934
HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
MEDIUM
5.5
CVSS Score
Published: July 12, 2024 at 12:25 PM UTC
Updated: October 15, 2026 at 01:18 AM UTC
2 products affected across 2 vendorsLinux KernelSIMATIC S7-1500 TM MFP
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak on logi_dj_recv_send_report() error path.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.10.195 ≤ v < 5.10.2215.15.132 ≤ v < 5.15.1625.4.257 ≤ v < 5.4.2796.1.53 ≤ v < 6.1.956.6 ≤ v < 6.6.356.7 ≤ v < 6.9.60ab92481d3a40a5ad323df4c518068f66ce49f1144becd79c196f02143ca71fc10766bd0cc660a14fb28379b3c735398b252a979c991b340baa6b5b5.10.1955.15.1325.4.2576.1.536.106.10 rc16.10 rc26.4.166.5.36e59609541514d2ed3472f5bc999c55bdb6144ee6f20d3261265885f6a6be4cda49d7019728760e0cf48a7ba5c095f76bb9c1951f120fa048442422fe38a6f12685d8a2189b72078f6254b069ff84650
Vendor states this is fixed in 15122dc140d82c51c216535c57b044c4587aae45 (fixed)
Vendor states this is fixed in 1df2ead5dfad5f8f92467bd94889392d53100b98 (fixed)
Vendor states this is fixed in 789c99a1d7d2c8f6096d75fc2930505840ec9ea0 (fixed)
Vendor states this is fixed in a0503757947f2e46e59c1962326b53b3208c8213 (fixed)
Vendor states this is fixed in caa9c9acb93db7ad7b74b157cf101579bac9596d (fixed)
Vendor states this is fixed in ce3af2ee95170b7d9e15fff6e500d67deab1e7b3 (fixed)
Vendor states this is fixed in f677ca8cfefee2a729ca315f660cd4868abdf8de (fixed)
Vendor states this is fixed in 5.10.221 (unaffected)
Vendor states this is fixed in 5.15.162 (unaffected)
Vendor states this is fixed in 5.4.279 (unaffected)
Vendor states this is fixed in 6.1.95 (unaffected)
Vendor states this is fixed in 6.10 (unaffected)
Affected range stops below 6.5, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.6 (unaffected)
Vendor states this is fixed in 6.6.35 (unaffected)
Vendor states this is fixed in 6.9.6 (unaffected)
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/15122dc140d82c51c216535c57b044c4587aae45
- https://git.kernel.org/stable/c/1df2ead5dfad5f8f92467bd94889392d53100b98
- https://git.kernel.org/stable/c/789c99a1d7d2c8f6096d75fc2930505840ec9ea0
- https://git.kernel.org/stable/c/a0503757947f2e46e59c1962326b53b3208c8213
- https://git.kernel.org/stable/c/caa9c9acb93db7ad7b74b157cf101579bac9596d
References (10)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/15122dc140d82c51c216535c57b044c4587aae45Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1df2ead5dfad5f8f92467bd94889392d53100b98Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/789c99a1d7d2c8f6096d75fc2930505840ec9ea0Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a0503757947f2e46e59c1962326b53b3208c8213Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/caa9c9acb93db7ad7b74b157cf101579bac9596dPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ce3af2ee95170b7d9e15fff6e500d67deab1e7b3Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f677ca8cfefee2a729ca315f660cd4868abdf8deSource: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlSSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card