Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-38611

media: i2c: et8ek8: Don't strip remove function when driver is builtin

Description

In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_VIDEO_ET8EK8=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/media/i2c/et8ek8/et8ek8: section mismatch in reference: et8ek8_i2c_driver+0x10 (section: .data) -> et8ek8_remove (section: .exit.text)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c5254e72b8edc2ca0a98703e92e8c34959343d2c to < 963523600d9f1e36bc35ba774c2493d6baa4dd8faffected
  • c5254e72b8edc2ca0a98703e92e8c34959343d2c to < ece3fc1c10197052044048bea4f13cfdcf25b416affected
  • c5254e72b8edc2ca0a98703e92e8c34959343d2c to < 04d1086a62ac492ebb6bb0c94c1c8cb55f5d1f36affected
  • c5254e72b8edc2ca0a98703e92e8c34959343d2c to < c1a3803e5bb91c13e9ad582003e4288f67f06cd9affected
  • c5254e72b8edc2ca0a98703e92e8c34959343d2c to < 43fff07e4b1956d0e5cf23717507e438278ea3d9affected
  • c5254e72b8edc2ca0a98703e92e8c34959343d2c to < 904db2ba44ae60641b6378c5013254d09acf5e80affected
  • c5254e72b8edc2ca0a98703e92e8c34959343d2c to < 545b215736c5c4b354e182d99c578a472ac9bfceaffected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 5.10.236 to ≤ 5.10.*unaffected
  • 5.15.180 to ≤ 5.15.*unaffected
  • 6.1.133 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.8.12 to ≤ 6.8.*unaffected
  • 6.9.3 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References