VDB

CVE-2024-56746

CVE-2024-56746 PUBLISHED CVSS 3.3 LOW

fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

Reported by linux · Published December 29, 2024

In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() When information such as info->screen_base is not ready, calling sh7760fb_free_mem() does not release memory correctly. Call dma_free_coherent() instead.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
LinuxLinuxf89d17ae2ac42931be2a0153fecbf8533280c927, f4fbd70e15fafe36a7583954ce189aaf5536aeec, d48cbfa90dce506030151915fa3346d67f964af4, d10cd53e5a7fb3b7c6f83d4d9a5ea1d97a3ed9a5, bad37309c8b8bf1cfc893750df0951a804009ca0, 40f4326ed05a3b3537556ff2a844958b9e779a98, 3dd9df8e5f34c6fc4217a7498c1fb3c352d4afc2, 29216bb390e36daeebef66abaa02d9751330252b, 0d3fb3b3e9d66f7b6346e3b90bc0ff48683539ce

Risk scores

CVSS 3.1
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

VendorProductVersions
LinuxLinux4a25e41831ee851c1365d8b41decc22493b18e6d, 4a25e41831ee851c1365d8b41decc22493b18e6d, 4a25e41831ee851c1365d8b41decc22493b18e6d
LinuxLinux2.6.27, 0, 4.19.325
LinuxLinux6.13, 4.19.325, 5.4.287
linuxlinux_kernel2.6.27, 2.6.27, 2.6.27

Timeline

  • Dec 29, 2024 CVE Published
  • Dec 30, 2024 EPSS Score (30 in total, the first dated here)
  • Feb 7, 2025 Coalition ESS Score (16 in total, the first dated here)
  • Dec 16, 2025 PoC Published
  • Dec 29, 2025 Security Advisory (434 in total, the first dated here)
  • Apr 29, 2026 Distribution Patch (351 in total, the first dated here)
  • May 11, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-56746
vulnetix vdb fixes CVE-2024-56746

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-56746/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›