What’s Vulnerable › Vulnerabilities

CVE-2024-27078: media: v4l2-tpg: fix some memleaks in tpg_alloc

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-01 · updated 2026-10-15
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpg_alloc In tpg_alloc, resources should be deallocated in each and every error-handling paths, since they are allocated in for statements. Otherwise there would be memleaks because tpg_free is called only when tpg_alloc return 0.

Affected products

• Linux kernel: from 3.18 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23 — fixed in 4.19.311, 5.10.214, 5.15.153, 5.4.273, 6.1.83, 6.6.23

How to fix

Upgrade to a fixed version: Linux kernel 4.19.311, 5.10.214, 5.15.153, 5.4.273. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0de691ff547d86dd54c24b40a81f9c925df8dd77
• https://git.kernel.org/stable/c/31096da07933598da8522c54bd007376fb152a09
• https://git.kernel.org/stable/c/4c86c772fef06f5d7a66151bac42366825db0941
• https://git.kernel.org/stable/c/622b1cf38521569869c8f7b9fbe9e4f1a289add7
• https://git.kernel.org/stable/c/6bf5c2fade8ed53b2d26fa9875e5b04f36c7145d
• https://git.kernel.org/stable/c/770a57922ce36a8476c43f7400b6501c554ea511
• https://git.kernel.org/stable/c/8269ab16415f2065cd792c49b0475543936cbd79
• https://git.kernel.org/stable/c/8cf9c5051076e0eb958f4361d50d8b0c3ee6691c
• https://git.kernel.org/stable/c/94303a06e1852a366e9671fff46d19459f88cb28
• https://git.kernel.org/stable/c/0de691ff547d86dd54c24b40a81f9c925df8dd77
• https://git.kernel.org/stable/c/31096da07933598da8522c54bd007376fb152a09
• https://git.kernel.org/stable/c/4c86c772fef06f5d7a66151bac42366825db0941

Get alerted when CVE-2024-27078 or the next vulnerability affects your stack