NetSight
IP …
medium5.5

CVE-2024-56705

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Add check for rgby_data memory allocation failure In ia_css_3a_statistics_a…

Impact

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Add check for rgby_data memory allocation failure In ia_css_3a_statistics_allocate(), there is no check on the allocation result of the rgby_data memory. If rgby_data is not successfully allocated, it may trigger the assert(host_stats->rgby_data) assertion in ia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.12 before 4.18
from 5.8 before 5.10.231
from 5.11 before 5.15.174
from 5.16 before 6.1.120
from 6.2 before 6.6.64
from 6.7 before 6.11.11
DebianDebian Linux
Version 11.0

Weakness classification

CWE-617

References