CVE-2024-27073

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: ttpci: fix two memleaks in budget_av_attach

When saa7146_register_device and saa7146_vv_init fails, budget_av_attach should free the resources it allocates, like the error-handling of ttpci_budget_init does. Besides, there are two fixme comment refers to such deallocations.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < af37aed04997e644f7e1b52b696b62dcae3cc016; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 910363473e4bf97da3c350e08d915546dd6cc30b; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 24e51d6eb578b82ff292927f14b9f5ec05a46beb; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 55ca0c7eae8499bb96f4e5d9b26af95e89c4e6a0; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7393c681f9aa05ffe2385e8716989565eed2fe06; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1597cd1a88cfcdc4bf8b1b44cd458fed9a5a5d63; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 656b8cc123d7635dd399d9f02594f27aa797ac3c; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d0b07f712bf61e1a3cf23c87c663791c42e50837
LinuxLinux2.6.12

References

Timeline

Published
May 1, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-270745.5In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encCVE-2024-270757.8In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: avoid stack overflow warnings with clang A previCVE-2024-270765.5In the Linux kernel, the following vulnerability has been resolved: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak Free the memCVE-2024-270775.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity The entCVE-2024-270785.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpg_alloc In tpg_alloc, resourceCVE-2024-270795.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix NULL domain on device release In the kdump kernel, theCVE-2024-27088.8A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file CVE-2024-270804.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when detecting delalloc ranges during fiemap For fiemaCVE-2024-270818.8ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the dashboard componentCVE-2024-270825.4Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-siCVE-2024-270836.1Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discoveCVE-2024-270856.5Discourse is an open source platform for community discussion. In affected versions users that are allowed to invite others can inject arbit
CVE-2024-27073: High severity, CVSS 7.8 | Vulnix