In the Linux kernel, the following vulnerability has been resolved:
media: zr364xx: fix memory leak in zr364xx_start_readpipe
syzbot reported memory leak in zr364xx driver. The problem was in non-freed urb in case of usb_submit_urb() fail.
backtrace: [<ffffffff82baedf6>] kmalloc include/linux/slab.h:561 [inline] [<ffffffff82baedf6>] usb_alloc_urb+0x66/0xe0 drivers/usb/core/urb.c:74 [<ffffffff82f7cce8>] zr364xx_start_readpipe+0x78/0x130 drivers/media/usb/zr364xx/zr364xx.c:1022 [<ffffffff84251dfc>] zr364xx_board_init drivers/media/usb/zr364xx/zr364xx.c:1383 [inline] [<ffffffff84251dfc>] zr364xx_probe+0x6a3/0x851 drivers/media/usb/zr364xx/zr364xx.c:1516 [<ffffffff82bb6507>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396 [<ffffffff826018a9>] really_probe+0x159/0x500 drivers/base/dd.c:576
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 14, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 15, 2025 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-macros | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-kvmUpgrade linux-awsUpgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linuxUpgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub