CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-56705: media: atomisp: Add check for rgby_data memory allocation failure
Description
In the Linux kernel, the following vulnerability has been resolved:
media: atomisp: Add check for rgby_data memory allocation failure
In ia_css_3a_statistics_allocate(), there is no check on the allocation
result of the rgby_data memory. If rgby_data is not successfully
allocated, it may trigger the assert(host_stats->rgby_data) assertion in
ia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.
Classification
CVE ID: CVE-2024-56705
Affected Products
Vendor: Linux
Product: Linux
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 12.41% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)
References
https://git.kernel.org/stable/c/0c24b82bc4d12c6a58ceacbf2598cd4df63abf9ahttps://git.kernel.org/stable/c/4676e50444046b498555b849e6080a5c78cdda9b
https://git.kernel.org/stable/c/02a97d9d7ff605fa4a1f908d1bd3ad8573234b61
https://git.kernel.org/stable/c/8066badaf7463194473fb4be19dbe50b11969aa0
https://git.kernel.org/stable/c/74aa783682c4d78c69d87898e40c78df1fec204e
https://git.kernel.org/stable/c/0c25ab93f2878cab07d37ca5afd302283201e5af
https://git.kernel.org/stable/c/ed61c59139509f76d3592683c90dc3fdc6e23cd6