What’s Vulnerable › Vulnerabilities

CVE-2024-56746: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-29 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() When information such as info->screen_base is not ready, calling sh7760fb_free_mem() does not release memory correctly. Call dma_free_coherent() instead.

Affected products

• Linux kernel: from 2.6.27 before 4.19.325; from 4.20 before 5.4.287; from 5.5 before 5.10.231; from 5.11 before 5.15.174; from 5.16 before 6.1.120; from 6.2 before 6.6.64 — fixed in 4.19.325, 5.10.231, 5.15.174, 5.4.287, 6.1.120, 6.11.11

How to fix

Upgrade to a fixed version: Linux kernel 4.19.325, 5.10.231, 5.15.174, 5.4.287. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0d3fb3b3e9d66f7b6346e3b90bc0ff48683539ce
• https://git.kernel.org/stable/c/29216bb390e36daeebef66abaa02d9751330252b
• https://git.kernel.org/stable/c/3dd9df8e5f34c6fc4217a7498c1fb3c352d4afc2
• https://git.kernel.org/stable/c/40f4326ed05a3b3537556ff2a844958b9e779a98
• https://git.kernel.org/stable/c/bad37309c8b8bf1cfc893750df0951a804009ca0
• https://git.kernel.org/stable/c/d10cd53e5a7fb3b7c6f83d4d9a5ea1d97a3ed9a5
• https://git.kernel.org/stable/c/d48cbfa90dce506030151915fa3346d67f964af4
• https://git.kernel.org/stable/c/f4fbd70e15fafe36a7583954ce189aaf5536aeec
• https://git.kernel.org/stable/c/f89d17ae2ac42931be2a0153fecbf8533280c927
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Get alerted when CVE-2024-56746 or the next vulnerability affects your stack