CVE-2024-41025
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the name as part of the init IOCTL call.
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the name as part of the init IOCTL call. This name needs to be copied to kernel for which memory is allocated. This memory is never freed which might result in memory leak. Free the memory when it is not needed.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.29% probability · 21th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2Patch
- https://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15ePatch
- https://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64Patch
- https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2Patch
- https://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15ePatch
- https://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.