CISA-2024-35833 — Vulnetix

CISA-2024-35833 PUBLISHED CVSS 5.5 MEDIUM

Reported by Linux · Published May 17, 2024

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA This dma_alloc_coherent() is undone neither in the remove function, nor in the error handling path of fsl_qdma_probe(). Switch to the managed version to fix both issues.

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Linux	Linux	b092529e0aa09829a6404424ce167bf3ce3235e2, b092529e0aa09829a6404424ce167bf3ce3235e2, b092529e0aa09829a6404424ce167bf3ce3235e2
Linux	Linux	5.1, 0, 5.4.269
Linux	Linux	b092529e0aa09829a6404424ce167bf3ce3235e2, b092529e0aa09829a6404424ce167bf3ce3235e2, b092529e0aa09829a6404424ce167bf3ce3235e2

Timeline

May 17, 2024 CVE Published
Dec 19, 2024 CVE Updated

References

https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html url

Open in Interactive Console →