5.5

CVE-2024-27074: debian debian_linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-27074DEBIAN-CVE-2024-27074
Published 01-05-2024Last modified 15-10-2026

Vulnerability summary

CVE-2024-27074 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.29%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 38 · Related 34

Timeline

  1. 01-05-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without a deallocation thereafter. After the following call chain: saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go) go is freed and thus bounce is leaked.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.29%

Chance of exploitation in the next 30 days

Percentile

20%

Versus all other CVEs

30-day change

0.00 pp

From 0.29% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.29%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu117 products
  • linuxAll versions (No fix recorded) | < 4.4.0-272.306 | < 4.15.0-241.253 | < 5.4.0-189.209 | < 5.15.0-112.122 | < 6.8.0-35.35
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1147.153 | < 4.4.0-1185.200 | < 4.15.0-1184.197 | < 5.4.0-1128.138 | < 5.15.0-1063.69 | < 6.8.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 7f11dd3d165b178e738fe73dfeea513e383bedb5 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 291cda0b805fc0d6e90d201710311630c8667159 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < b49fe84c6cefcc1c2336d793b53442e716c95073 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 790fa2c04dfb9f095ec372bf17909424d6e864b3 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < e04d15c8bb3e111dd69f98894acd92d63e87aac3 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < d43988a23c32588ccd0c74219637afb96cd78661 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 7405a0d4442792988e9ae834e7d84f9d163731a4 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < b9b683844b01d171a72b9c0419a2d760d946ee12 | 3.10
  • linux_kernel≥ 3.10, < 4.19.311 | ≥ 4.20, < 5.4.273 | ≥ 5.5, < 5.10.214 | ≥ 5.11, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2

3 vendors · 121 products

References

43 links
Show all 43 references