First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-56572

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()

The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here.

To mitigate this, free the buffer when allegro_alloc_buffer fails.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Dec 27, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-565735.5In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdline_ptr is an out par CVE-2024-565745.5In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in ts2020_probe() KASAN reported a n CVE-2024-565755.5In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Ensure power suppliers be suspended before detach them CVE-2024-565764.7In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix crash in the probe error path when using poll CVE-2024-565775.5In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix null-ptr-deref during unload module The workqueue CVE-2024-565785.5In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Set video drvdata before register video device The vi CVE-2024-565795.5In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before register video device The vid CVE-2024-56586.5The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.CVE-2024-565805.5In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains T CVE-2024-565817.8In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrf CVE-2024-565827.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfs_encoded_read_endio() Shinichiro rep CVE-2024-565835.5In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix warning in migrate_enable for boosted tasks When r

CVE-2024-56572: Medium severity, CVSS 5.5 | Vulnix