What’s Vulnerable › Vulnerabilities

CVE-2024-40932: drm/exynos/vidi: fix memory leak in .get_modes()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-12 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix it.

Affected products

• Linux kernel: before 4.19.317; from 4.20 before 5.4.279; from 5.5 before 5.10.221; from 5.11 before 5.15.162; from 5.16 before 6.1.95; from 6.2 before 6.6.35 — fixed in 4.19.317, 5.10.221, 5.15.162, 5.4.279, 6.1.95, 6.6.35

How to fix

Upgrade to a fixed version: Linux kernel 4.19.317, 5.10.221, 5.15.162, 5.4.279. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0acc356da8546b5c55aabfc2e2c5caa0ac9b0003
• https://git.kernel.org/stable/c/38e3825631b1f314b21e3ade00b5a4d737eb054e
• https://git.kernel.org/stable/c/540ca99729e28dbe902b01039a3b4bd74520a819
• https://git.kernel.org/stable/c/777838c9b571674ef14dbddf671f372265879226
• https://git.kernel.org/stable/c/a269c5701244db2722ae0fce5d1854f5d8f31224
• https://git.kernel.org/stable/c/cb3ac233434dba130281db330c4b15665b2d2c4d
• https://git.kernel.org/stable/c/dcba6bedb439581145d8aa6b0925209f23184ae1
• https://git.kernel.org/stable/c/ebcf81504fef03f701b9711e43fea4fe2d82ebc8
• https://git.kernel.org/stable/c/0acc356da8546b5c55aabfc2e2c5caa0ac9b0003
• https://git.kernel.org/stable/c/38e3825631b1f314b21e3ade00b5a4d737eb054e
• https://git.kernel.org/stable/c/540ca99729e28dbe902b01039a3b4bd74520a819
• https://git.kernel.org/stable/c/777838c9b571674ef14dbddf671f372265879226

Get alerted when CVE-2024-40932 or the next vulnerability affects your stack