Vulnerability in Linux
CVE-2024-53076
In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() If per_time_scales[i] or per_time_gains[i] kcalloc fails in the for loop of iio_gts_build_avail_scale_table(), the err_free_out will fail to call kfree() each time when i is reduced to 0, so all the per_time_scales[0] and per_time_gains[0] will not be freed, which will cause memory leaks. Fix it by checking if i >= 0.
EPSS: 0.002 (12.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 38416c28e16890b52fdd5eb73479299ec3f062f3, 6.4, 0
- Linux Linux_kernel — versions 6.12
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-53076?
- CVE-2024-53076 is a high-severity vulnerability in Linux, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.8/10. Published 2024-11-19.
- How severe is CVE-2024-53076?
- High severity. CVSS v3 base score is 7.8 out of 10.