In the Linux kernel, the following vulnerability has been resolved:
soundwire: stream: fix memory leak in stream config error path
When stream config is failed, master runtime will release all slave runtime in the slave_rt_list, but slave runtime is not added to the list at this time. This patch frees slave runtime in the config error path to fix the memory leak.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-devel | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-azureUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-azure-5.4 | Nov 19, 2024 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub