What’s Vulnerable › Vulnerabilities

CVE-2024-41025: misc: fastrpc: Fix memory leak in audio daemon attach operation

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-29 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the name as part of the init IOCTL call. This name needs to be copied to kernel for which memory is allocated. This memory is never freed which might result in memory leak. Free the memory when it is not needed.

Affected products

• Linux kernel: from 6.2 before 6.6.41; from 6.7 before 6.9.10; 6.10-rc1, 6.10-rc2, 6.10-rc3, 6.10-rc4, 6.10-rc5, 6.10-rc6 (+1) — fixed in 6.6.41, 6.9.10

How to fix

Upgrade to a fixed version: Linux kernel 6.6.41, 6.9.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2
• https://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15e
• https://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64
• https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2
• https://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15e
• https://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64

Get alerted when CVE-2024-41025 or the next vulnerability affects your stack