PT-2024-9080 · Linux+6 · Linux Kernel+6
Published
2024-04-29
·
Updated
2025-09-29
·
CVE-2024-36955
CVSS v3.1
7.7
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the usage of
device get named child node() in the ALSA component of the Linux kernel. The documentation for this function mentions that the caller is responsible for calling fwnode handle put() on the returned fwnode pointer to avoid a leaked reference. The vulnerability can cause a memory leak. Additionally, there is a mention of a potential denial-of-service due to a memory leak in the is link enabled() function.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu