CVE-2024-56572

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 27, 2024
Updated: Jan 14, 2025
CWE ID 401

Summary

CVE-2024-56572 is a recently identified vulnerability in the Linux kernel. This issue affects the Allegro DVT media driver and involves a memory leak in the function "allocate_buffers_internal()". The buffer in question is not being released properly under certain exception paths, which can lead to a memory leak. To address this vulnerability, developers must ensure that the buffer is freed when allegro_alloc_buffer fails. By releasing the buffer under these conditions, the potential for memory leaks is eliminated.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share