CVE-2024-56572

CVSS 3.1 Score 5.5 of 10 (medium)

Attack Complexity low
Availability high
Privileges Required low
Confidentiality none
Integrity none
Scope unchanged

Details

Published Dec 27, 2024
Updated: Jan 14, 2025
CWE ID 401

Summary

CVE-2024-56572 is a recently identified vulnerability in the Linux kernel. This issue affects the Allegro DVT media driver and involves a memory leak in the function "allocate_buffers_internal()". The buffer in question is not being released properly under certain exception paths, which can lead to a memory leak. To address this vulnerability, developers must ensure that the buffer is freed when allegro_alloc_buffer fails. By releasing the buffer under these conditions, the potential for memory leaks is eliminated.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share