Description
In the Linux kernel, the following vulnerability has been resolved:
media: venus: vdec: fixed possible memory leak issue
The venus_helper_alloc_dpb_bufs() implementation allows an early return on an error path when checking the id from ida_alloc_min() which would not release the earlier buffer allocation.
Move the direct kfree() from the error checking of dma_alloc_attrs() to the common fail path to ensure that allocations are released on all error paths in this function.
Addresses-Coverity: 1494120 ("Resource leak")
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 745e6d8bbe6a6e2e40b1609cea114c129f17031a, < 5cedfe8aaf1875a5305897107b7f298db4260019; >= 40d87aafee29fb01ce1e1868502fb2059a6a7f34, < 55bccafc246b2e64763a155ec454470c07a54a6e; >= 40d87aafee29fb01ce1e1868502fb2059a6a7f34, < 5f89d05ba93df9c2cdfe493843f93288e55e99eb; >= 40d87aafee29fb01ce1e1868502fb2059a6a7f34, < 8403fdd775858a7bf04868d43daea0acbe49ddfc |
| Linux | Linux | 5.16 |
References
- https://git.kernel.org/stable/c/55bccafc246b2e64763a155ec454470c07a54a6ePatch
- https://git.kernel.org/stable/c/5cedfe8aaf1875a5305897107b7f298db4260019Patch
- https://git.kernel.org/stable/c/5f89d05ba93df9c2cdfe493843f93288e55e99ebPatch
- https://git.kernel.org/stable/c/8403fdd775858a7bf04868d43daea0acbe49ddfcPatch
Timeline
- Published
- Feb 26, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Modified