Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-53202

firmware_loader: Fix possible resource leak in fw_log_firmware_info()

Description

In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix possible resource leak in fw_log_firmware_info() The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with crypto_free_shash when kmalloc fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to < 789a72498d32f88d24371c10985aceb46397056caffected
  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to < eb5d67d00ad17a5bd0920f455160dc2ccbd2dc78affected
  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to < f380f895dbb2a11d62ca6df9e82d995f4bc26b84affected
  • 02fe26f25325b547b7a31a65deb0326c04bb5174 to < 369a9c046c2fdfe037f05b43b84c386bdbccc103affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.64 to ≤ 6.6.*unaffected
  • 6.11.11 to ≤ 6.11.*unaffected
  • 6.12.2 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References