CVE-2024-27076: debian debian_linux
CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-27076DEBIAN-CVE-2024-27076
Published 01-05-2024Last modified 15-10-2026
Vulnerability summary
CVE-2024-27076 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.29%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 27 · Related 25DLA-3842-1DSA-5681-1SUSE-SU-2024:2008-1SUSE-SU-2024:2019-1SUSE-SU-2024:2190-1SUSE-SU-2025:20008-1SUSE-SU-2025:20028-1USN-6816-1USN-6817-1USN-6817-2USN-6817-3USN-6820-1USN-6820-2USN-6821-1USN-6821-2USN-6821-3USN-6821-4USN-6828-1USN-6871-1USN-6878-1USN-6892-1USN-6896-1USN-6896-2USN-6896-3USN-6896-4USN-6896-5USN-6919-1
Timeline
- 01-05-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak Free the memory allocated in v4l2_ctrl_handler_init on release.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
0.00 pp
From 0.29% on 18-09-2026
18-09-202618-10-2026
EPSS score0.29%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu113 products
- linux< 5.4.0-189.209 | < 5.15.0-112.122 | < 6.8.0-35.35
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1128.138 | < 5.15.0-1063.69 | < 6.8.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.85-1 | < 6.7.12-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ a8ef0488cc592921a917362cca66af4a601987b9, < 8c2e4efe1278cd2b230cdbf90a6cefbf00acc282 | ≥ a8ef0488cc592921a917362cca66af4a601987b9, < 5d9fe604bf9b5b09d2215225df55f22a4cbbc684 | ≥ a8ef0488cc592921a917362cca66af4a601987b9, < b1d0eebaf87cc9ccd05f779ec4a0589f95d6c18b | ≥ a8ef0488cc592921a917362cca66af4a601987b9, < 8df9a3c7044b847e9c4dc7e683fd64c6b873f328 | ≥ a8ef0488cc592921a917362cca66af4a601987b9, < d164ddc21e986dd9ad614b4b01746e5457aeb24f | ≥ a8ef0488cc592921a917362cca66af4a601987b9, < 42492b00156c03a79fd4851190aa63045d6a15ce | ≥ a8ef0488cc592921a917362cca66af4a601987b9, < 6c92224721a439d6350db5933a1060768dcd565e | ≥ a8ef0488cc592921a917362cca66af4a601987b9, < 4797a3dd46f220e6d83daf54d70c5b33db6deb01 | 5.4
- linux_kernel≥ 5.4, < 5.4.273 | ≥ 5.5, < 5.10.214 | ≥ 5.11, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2
3 vendors · 117 products