#VU101996 Memory leak in Linux kernel - CVE-2024-56572

Vulnerability identifier: #VU101996

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56572

CWE-ID: CWE-401

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the allocate_buffers_internal() function in drivers/media/platform/allegro-dvt/allegro-core.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/0f514068fbc5d4d189c817adc7c4e32cffdc2e47
https://git.kernel.org/stable/c/17e5613666209be4e5be1f1894f1a6014a8a0658
https://git.kernel.org/stable/c/64f72a738864b506ab50b4a6cb3ce3c3e04b71af
https://git.kernel.org/stable/c/6712a28a4f923ffdf51cff267ad05a634ee1babc
https://git.kernel.org/stable/c/74a65313578b35e1239966adfa7ac2bdd60caf00
https://git.kernel.org/stable/c/891b5790bee8fc6ddba17874dd87a646128d0b99
https://git.kernel.org/stable/c/cf642904be39ae0d441dbdfa8f485e0a46260be4

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.