In the Linux kernel, the following vulnerability has been resolved:
media: zr364xx: fix memory leak in zr364xx_start_readpipe
syzbot reported memory leak in zr364xx driver. The problem was in non-freed urb in case of usb_submit_urb() fail.
backtrace: [<ffffffff82baedf6>] kmalloc include/linux/slab.h:561 [inline] [<ffffffff82baedf6>] usb_alloc_urb+0x66/0xe0 drivers/usb/core/urb.c:74 [<ffffffff82f7cce8>] zr364xx_start_readpipe+0x78/0x130 drivers/media/usb/zr364xx/zr364xx.c:1022 [<ffffffff84251dfc>] zr364xx_board_init drivers/media/usb/zr364xx/zr364xx.c:1383 [inline] [<ffffffff84251dfc>] zr364xx_probe+0x6a3/0x851 drivers/media/usb/zr364xx/zr364xx.c:1516 [<ffffffff82bb6507>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396 [<ffffffff826018a9>] really_probe+0x159/0x500 drivers/base/dd.c:576
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 14, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 15, 2025 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub