CVE-2024-56546

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56546
In the Linux kernel, the following vulnerability has been resolved: drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() If we fail to allocate memory for cb_data by kmalloc, the memory allocation for eve_data is never freed, add the missing kfree() in the error handling path.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/272168927f38bda46f6c1ed5f40de97689e7a5d2 Patch
https://git.kernel.org/stable/c/44ed4f90a97ff6f339e50ac01db71544e0990efc Patch
https://git.kernel.org/stable/c/584d420771e1ad2bb74e19a19da8ae0fee0a6e1f Patch
https://git.kernel.org/stable/c/5a3bda42394ff137eb2d3d3d20d2956a8c6e9237 Patch
https://git.kernel.org/stable/c/882d7afaa4b82c20a7be7a3a039532a80ebacd23 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Sep 2025, 16:44

Type Values Removed Values Added
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: controladores: soc: xilinx: agregue el kfree faltante en xlnx_add_cb_for_suspend() Si no podemos asignar memoria para cb_data mediante kmalloc, la asignación de memoria para eve_data nunca se libera, agregue el kfree() faltante en la ruta de gestión de errores.
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/272168927f38bda46f6c1ed5f40de97689e7a5d2 - () https://git.kernel.org/stable/c/272168927f38bda46f6c1ed5f40de97689e7a5d2 - Patch
References () https://git.kernel.org/stable/c/44ed4f90a97ff6f339e50ac01db71544e0990efc - () https://git.kernel.org/stable/c/44ed4f90a97ff6f339e50ac01db71544e0990efc - Patch
References () https://git.kernel.org/stable/c/584d420771e1ad2bb74e19a19da8ae0fee0a6e1f - () https://git.kernel.org/stable/c/584d420771e1ad2bb74e19a19da8ae0fee0a6e1f - Patch
References () https://git.kernel.org/stable/c/5a3bda42394ff137eb2d3d3d20d2956a8c6e9237 - () https://git.kernel.org/stable/c/5a3bda42394ff137eb2d3d3d20d2956a8c6e9237 - Patch
References () https://git.kernel.org/stable/c/882d7afaa4b82c20a7be7a3a039532a80ebacd23 - () https://git.kernel.org/stable/c/882d7afaa4b82c20a7be7a3a039532a80ebacd23 - Patch

27 Dec 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 14:15

Updated : 2025-09-23 16:44

NVD link : CVE-2024-56546

Mitre link : CVE-2024-56546

CVE.ORG link : CVE-2024-56546

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime