CVE-2024-27074: debian debian_linux
Vulnerability summary
CVE-2024-27074 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 38 · Related 34Timeline
- 01-05-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without a deallocation thereafter. After the following call chain: saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go) go is freed and thus bounce is leaked.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
0.00 pp
From 0.29% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu117 products
- linuxAll versions (No fix recorded) | < 4.4.0-272.306 | < 4.15.0-241.253 | < 5.4.0-189.209 | < 5.15.0-112.122 | < 6.8.0-35.35
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1147.153 | < 4.4.0-1185.200 | < 4.15.0-1184.197 | < 5.4.0-1128.138 | < 5.15.0-1063.69 | < 6.8.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.85-1 | < 6.7.12-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 7f11dd3d165b178e738fe73dfeea513e383bedb5 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 291cda0b805fc0d6e90d201710311630c8667159 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < b49fe84c6cefcc1c2336d793b53442e716c95073 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 790fa2c04dfb9f095ec372bf17909424d6e864b3 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < e04d15c8bb3e111dd69f98894acd92d63e87aac3 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < d43988a23c32588ccd0c74219637afb96cd78661 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < 7405a0d4442792988e9ae834e7d84f9d163731a4 | ≥ 95ef39403f890360a3e48fe550d8e8e5d088ad74, < b9b683844b01d171a72b9c0419a2d760d946ee12 | 3.10
- linux_kernel≥ 3.10, < 4.19.311 | ≥ 4.20, < 5.4.273 | ≥ 5.5, < 5.10.214 | ≥ 5.11, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2
3 vendors · 121 products