CVE-2024-56746
In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() When information such as info->screen_base is not ready, calling sh7760fb_free_mem() does not release memory correctly.
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() When information such as info->screen_base is not ready, calling sh7760fb_free_mem() does not release memory correctly. Call dma_free_coherent() instead.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.22% probability · 12th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/0d3fb3b3e9d66f7b6346e3b90bc0ff48683539cePatch
- https://git.kernel.org/stable/c/29216bb390e36daeebef66abaa02d9751330252bPatch
- https://git.kernel.org/stable/c/3dd9df8e5f34c6fc4217a7498c1fb3c352d4afc2Patch
- https://git.kernel.org/stable/c/40f4326ed05a3b3537556ff2a844958b9e779a98Patch
- https://git.kernel.org/stable/c/bad37309c8b8bf1cfc893750df0951a804009ca0Patch
- https://git.kernel.org/stable/c/d10cd53e5a7fb3b7c6f83d4d9a5ea1d97a3ed9a5Patch
- https://git.kernel.org/stable/c/d48cbfa90dce506030151915fa3346d67f964af4Patch
- https://git.kernel.org/stable/c/f4fbd70e15fafe36a7583954ce189aaf5536aeecPatch
- https://git.kernel.org/stable/c/f89d17ae2ac42931be2a0153fecbf8533280c927Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.