CVE-2024-42262

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42262
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the performance extension If fetching of userspace memory fails during the main loop, all drm sync objs looked up until that point will be leaked because of the missing drm_syncobj_put. Fix it by exporting and using a common cleanup helper. (cherry picked from commit 484de39fa5f5b7bd0c5f2e2c5265167250ef7501)

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/ad5fdc48f7a63b8a98493c667505fe4d3864ae21 Patch
https://git.kernel.org/stable/c/32df4abc44f24dbec239d43e2b26d5768c5d1a78 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Aug 2024, 20:05

Type Values Removed Values Added
CWE CWE-401
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/32df4abc44f24dbec239d43e2b26d5768c5d1a78 - () https://git.kernel.org/stable/c/32df4abc44f24dbec239d43e2b26d5768c5d1a78 - Patch
References () https://git.kernel.org/stable/c/ad5fdc48f7a63b8a98493c667505fe4d3864ae21 - () https://git.kernel.org/stable/c/ad5fdc48f7a63b8a98493c667505fe4d3864ae21 - Patch

17 Aug 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-17 09:15

Updated : 2024-08-19 20:05

NVD link : CVE-2024-42262

Mitre link : CVE-2024-42262

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime