media: go7007: fix a memleak in go7007_load_encoder

Summary

In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without a deallocation thereafter. After the following call chain: saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go) go is freed and thus bounce is leaked.

Timeline

1. May 1, 2024, 1:04 PM UTCCVE published
2. May 9, 2024, 6:38 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 15, 2026, 12:40 AM UTCRecord last updated

Affected versions

• Linux Linux

  From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in 7f11dd3d165b178e738fe73dfeea513e383bedb5; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in 291cda0b805fc0d6e90d201710311630c8667159; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in b49fe84c6cefcc1c2336d793b53442e716c95073; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in 790fa2c04dfb9f095ec372bf17909424d6e864b3; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in e04d15c8bb3e111dd69f98894acd92d63e87aac3; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in d43988a23c32588ccd0c74219637afb96cd78661; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in 7405a0d4442792988e9ae834e7d84f9d163731a4; From 95ef39403f890360a3e48fe550d8e8e5d088ad74 · fixed in b9b683844b01d171a72b9c0419a2d760d946ee12

• Linux Linux

  3.10

• KernelLinux

  From 3.10.0 · fixed in 4.19.311; From 4.20.0 · fixed in 5.4.273; From 5.5.0 · fixed in 5.10.214; From 5.11.0 · fixed in 5.15.153; From 5.16.0 · fixed in 6.1.83; From 6.2.0 · fixed in 6.6.23; From 6.7.0 · fixed in 6.7.11; From 6.8.0 · fixed in 6.8.2

References 9