CVE-2024-38611

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: et8ek8: Don't strip remove function when driver is builtin

Using __exit for the remove function results in the remove callback being discarded with CONFIG_VIDEO_ET8EK8=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally.

This also fixes a W=1 modpost warning:

WARNING: modpost: drivers/media/i2c/et8ek8/et8ek8: section mismatch in reference: et8ek8_i2c_driver+0x10 (section: .data) -> et8ek8_remove (section: .exit.text)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= c5254e72b8edc2ca0a98703e92e8c34959343d2c, < 963523600d9f1e36bc35ba774c2493d6baa4dd8f; >= c5254e72b8edc2ca0a98703e92e8c34959343d2c, < ece3fc1c10197052044048bea4f13cfdcf25b416; >= c5254e72b8edc2ca0a98703e92e8c34959343d2c, < 04d1086a62ac492ebb6bb0c94c1c8cb55f5d1f36; >= c5254e72b8edc2ca0a98703e92e8c34959343d2c, < c1a3803e5bb91c13e9ad582003e4288f67f06cd9; >= c5254e72b8edc2ca0a98703e92e8c34959343d2c, < 43fff07e4b1956d0e5cf23717507e438278ea3d9; >= c5254e72b8edc2ca0a98703e92e8c34959343d2c, < 904db2ba44ae60641b6378c5013254d09acf5e80; >= c5254e72b8edc2ca0a98703e92e8c34959343d2c, < 545b215736c5c4b354e182d99c578a472ac9bfce
LinuxLinux4.11

References

Timeline

Published
Jun 19, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-386127.0In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_iniCVE-2024-386134.7In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching doCVE-2024-386145.5In the Linux kernel, the following vulnerability has been resolved: openrisc: traps: Don't send signals to kernel mode threads OpenRISC exCVE-2024-386155.5In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional aCVE-2024-386168.2In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: re-fix fortified-memset warning The carl9170_tx_releasCVE-2024-386175.5In the Linux kernel, the following vulnerability has been resolved: kunit/fortify: Fix mismatched kvalloc()/vfree() usage The kv*() familyCVE-2024-386185.5In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer dCVE-2024-386195.5In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The memberCVE-2024-38625.3The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. ThCVE-2024-386205.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCICVE-2024-386217.1In the Linux kernel, the following vulnerability has been resolved: media: stk1160: fix bounds checking in stk1160_copy_video() The subtraCVE-2024-386225.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check before its call In dp
CVE-2024-38611: Medium severity, CVSS 5.5 | Vulnix