In the Linux kernel, the following vulnerability has been resolved:
media: zr364xx: fix memory leak in zr364xx_start_readpipe
syzbot reported memory leak in zr364xx driver. The problem was in non-freed urb in case of usb_submit_urb() fail.
backtrace: [<ffffffff82baedf6>] kmalloc include/linux/slab.h:561 [inline] [<ffffffff82baedf6>] usb_alloc_urb+0x66/0xe0 drivers/usb/core/urb.c:74 [<ffffffff82f7cce8>] zr364xx_start_readpipe+0x78/0x130 drivers/media/usb/zr364xx/zr364xx.c:1022 [<ffffffff84251dfc>] zr364xx_board_init drivers/media/usb/zr364xx/zr364xx.c:1383 [inline] [<ffffffff84251dfc>] zr364xx_probe+0x6a3/0x851 drivers/media/usb/zr364xx/zr364xx.c:1516 [<ffffffff82bb6507>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396 [<ffffffff826018a9>] really_probe+0x159/0x500 drivers/base/dd.c:576
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 14, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jan 15, 2025 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-devel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-azure | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub