CVE-2024-27077: debian debian_linux
CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-27077DEBIAN-CVE-2024-27077
Published 01-05-2024Last modified 15-10-2026
Vulnerability summary
CVE-2024-27077 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.29%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 28 · Related 25DLA-3840-1DLA-3842-1DSA-5681-1SUSE-SU-2024:2008-1SUSE-SU-2024:2019-1SUSE-SU-2024:2190-1SUSE-SU-2025:20008-1SUSE-SU-2025:20028-1USN-6816-1USN-6817-1USN-6817-2USN-6817-3USN-6820-1USN-6820-2USN-6821-1USN-6821-2USN-6821-3USN-6821-4USN-6828-1USN-6871-1USN-6878-1USN-6892-1USN-6896-1USN-6896-2USN-6896-3USN-6896-4USN-6896-5USN-6919-1
Timeline
- 01-05-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity The entity->name (i.e. name) is allocated in v4l2_m2m_register_entity but isn't freed in its following error-handling paths. This patch adds such deallocation to prevent memleak of entity->name.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
0.00 pp
From 0.29% on 18-09-2026
18-09-202618-10-2026
EPSS score0.29%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu113 products
- linux< 5.4.0-189.209 | < 5.15.0-112.122 | < 6.8.0-35.35
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1128.138 | < 5.15.0-1063.69 | < 6.8.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.85-1 | < 6.7.12-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ be2fff656322e82f215730839063c2c2ca73d14b, < 3dd8abb0ed0e0a7c66d6d677c86ccb188cc39333 | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < 0175f2d34c85744f9ad6554f696cf0afb5bd04e4 | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < afd2a82fe300032f63f8be5d6cd6981e75f8bbf2 | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < dc866b69cc51af9b8509b4731b8ce2a4950cd0ef | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < 0c9550b032de48d6a7fa6a4ddc09699d64d9300d | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < 90029b9c979b60de5cb2b70ade4bbf61d561bc5d | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < 5dc319cc3c4f7b74f7dfba349aa26f87efb52458 | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < 9c23ef30e840fedc66948299509f6c2777c9cf4f | ≥ be2fff656322e82f215730839063c2c2ca73d14b, < 8f94b49a5b5d386c038e355bef6347298aabd211 | 4.19
- linux_kernel≥ 4.19, < 4.19.311 | ≥ 4.20, < 5.4.273 | ≥ 5.5, < 5.10.214 | ≥ 5.11, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2
3 vendors · 117 products
