CVE-2024-41025

MEDIUM5.5

misc: fastrpc: Fix memory leak in audio daemon attach operation

Published Jul 29, 2024

Modified 8 months ago

Details

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Fix memory leak in audio daemon attach operation

Audio PD daemon send the name as part of the init IOCTL call. This name needs to be copied to kernel for which memory is allocated. This memory is never freed which might result in memory leak. Free the memory when it is not needed.

References

WEBhttps://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2 WEBhttps://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15e WEBhttps://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2024-41025

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedJul 29, 2024

ModifiedMay 4, 2025

CVE-2024-41025 | Mondoo Vulnerability Intelligence