Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-41002 Details

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SEC resources. When releasing resources, it need to release the AIV resources at the same time. Otherwise, memory leakage occurs. The aiv resource release is added to the sec resource release function.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/36810d2db3496bb8b4db7ccda666674a5efc7b47 kernel.orgPatch
https://git.kernel.org/stable/c/7c42ce556ff65995c8875c9ed64141c14238e7e6 kernel.orgPatch
https://git.kernel.org/stable/c/9f21886370db451b0fdc651f6e41550a1da70601 kernel.orgPatch
https://git.kernel.org/stable/c/a886bcb0f67d1e3d6b2da25b3519de59098200c2 kernel.orgPatch
https://git.kernel.org/stable/c/bba4250757b4ae1680fea435a358d8093f254094 kernel.orgPatch

see all 11 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-401Missing Release of Memory after Effective Lifetime[email protected]

Affected Products

ProductVersions
linux linux kernel
< 5.15.162
>= 5.16, < 6.1.96
>= 6.2, < 6.6.36
>= 6.7, < 6.9.7

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-41002
NVD Published Date:
Jul 12, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-41002 Details - Not Deferred