CVE-2024-27076

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak

Free the memory allocated in v4l2_ctrl_handler_init on release.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= a8ef0488cc592921a917362cca66af4a601987b9, < 8c2e4efe1278cd2b230cdbf90a6cefbf00acc282; >= a8ef0488cc592921a917362cca66af4a601987b9, < 5d9fe604bf9b5b09d2215225df55f22a4cbbc684; >= a8ef0488cc592921a917362cca66af4a601987b9, < b1d0eebaf87cc9ccd05f779ec4a0589f95d6c18b; >= a8ef0488cc592921a917362cca66af4a601987b9, < 8df9a3c7044b847e9c4dc7e683fd64c6b873f328; >= a8ef0488cc592921a917362cca66af4a601987b9, < d164ddc21e986dd9ad614b4b01746e5457aeb24f; >= a8ef0488cc592921a917362cca66af4a601987b9, < 42492b00156c03a79fd4851190aa63045d6a15ce; >= a8ef0488cc592921a917362cca66af4a601987b9, < 6c92224721a439d6350db5933a1060768dcd565e; >= a8ef0488cc592921a917362cca66af4a601987b9, < 4797a3dd46f220e6d83daf54d70c5b33db6deb01
LinuxLinux5.4
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1

References

Timeline

Published
May 1, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-270775.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity The entCVE-2024-270785.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpg_alloc In tpg_alloc, resourceCVE-2024-270795.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix NULL domain on device release In the kdump kernel, theCVE-2024-27088.8A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file CVE-2024-270804.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when detecting delalloc ranges during fiemap For fiemaCVE-2024-270818.8ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the dashboard componentCVE-2024-270825.4Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-siCVE-2024-270836.1Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discoveCVE-2024-270856.5Discourse is an open source platform for community discussion. In affected versions users that are allowed to invite others can inject arbitCVE-2024-270863.9The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET applications targeting Xamarin Android and .NET AndCVE-2024-270875.4Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that each validate the enCVE-2024-270885.5es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `
CVE-2024-27076: Medium severity, CVSS 5.5 | Vulnix