PT-2024-8298 · Linux+6 · Linux Kernel+6

Zhipeng Lu · Published 2024-02-28 · Updated 2025-11-19 · CVE-2024-27074

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the go7007 load encoder function. This leak occurs because bounce (i.e., go->boot fw) is allocated without being deallocated afterwards. The leak happens after a specific call chain: saa7134 go7007 init -> go7007 boot encoder -> go7007 load encoder -> kfree(go), where go is freed, resulting in the leak of bounce. This could potentially allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-7511

BDU:2024-09851

CVE-2024-27074

DLA-3840-1

DLA-3842-1

DSA-5681-1

OESA-2024-1617

OESA-2024-1618

OESA-2024-2292

OESA-2024-2293

OESA-2024-2295

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2190-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6820-1

USN-6820-2

USN-6821-1

USN-6821-2

USN-6821-3

USN-6821-4

USN-6828-1

USN-6871-1

USN-6878-1

USN-6892-1

USN-6896-1

USN-6896-2

USN-6896-3

USN-6896-4

USN-6896-5

USN-6919-1

USN-7727-1

USN-7727-2

USN-7727-3

USN-7755-1

USN-7755-2

USN-7755-3

USN-7875-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3491

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27074.json · Exploit
• https://ubuntu.com/security/CVE-2023-52642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26740 · Security Note
• https://ubuntu.com/security/CVE-2024-26602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35814 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27037 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7727-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26766 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52645 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26615 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26803 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47082 · Security Note
• https://osv.dev/vulnerability/USN-6821-3 · Vendor Advisory