CVE-2024-56746

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 29, 2024
Updated: Jan 7, 2025
CWE ID 401

Summary

CVE-2024-56746 is a recently identified vulnerability in the Linux kernel. Specifically, it affects the sh7760fb driver, where a memory leak in the function sh7760fb_alloc_mem() may occur. This issue arises when certain required information, such as 'info->screen_base', is not yet available. As a result, calling sh7760fb_free_mem() does not effectively release allocated memory, leading to a potential memory leak. To address this issue, the recommended solution is to use dma_free_coherent() instead for memory deallocation in applicable scenarios.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share