What’s Vulnerable › Vulnerabilities

CVE-2024-35829: drm/lima: fix a memleak in lima_heap_alloc

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix a memleak in lima_heap_alloc When lima_vm_map_bo fails, the resources need to be deallocated, or there will be memleaks.

Affected products

• Debian Linux: 10.0
• Linux kernel: from 5.7 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2 — fixed in 5.10.214, 5.15.153, 6.1.83, 6.6.23, 6.7.11, 6.8.2

How to fix

Upgrade to a fixed version: Linux kernel 5.10.214, 5.15.153, 6.1.83, 6.6.23. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/04ae3eb470e52a3c41babe85ff8cee195e4dcbea
• https://git.kernel.org/stable/c/4ab14eccf5578af1dd5668a5f2d771df27683cab
• https://git.kernel.org/stable/c/746606d37d662c70ae1379fc658ee9c65f06880f
• https://git.kernel.org/stable/c/8e25c0ee5665e8a768b8e21445db1f86e9156eb7
• https://git.kernel.org/stable/c/ec6bb037e4a35fcbb5cd7bc78242d034ed893fcd
• https://git.kernel.org/stable/c/f2e80ac9344aebbff576453d5c0290b332e187ed
• https://git.kernel.org/stable/c/f6d51a91b41704704e395de6839c667b0f810bbf
• https://git.kernel.org/stable/c/04ae3eb470e52a3c41babe85ff8cee195e4dcbea
• https://git.kernel.org/stable/c/4ab14eccf5578af1dd5668a5f2d771df27683cab
• https://git.kernel.org/stable/c/746606d37d662c70ae1379fc658ee9c65f06880f
• https://git.kernel.org/stable/c/8e25c0ee5665e8a768b8e21445db1f86e9156eb7
• https://git.kernel.org/stable/c/ec6bb037e4a35fcbb5cd7bc78242d034ed893fcd

Get alerted when CVE-2024-35829 or the next vulnerability affects your stack