Memory Leak Vulnerability in Linux Kernel Affecting fbdev

CVE-2024-56746

Summary

A memory leak vulnerability exists in the Linux kernel's fbdev subsystem related to the sh7760 framebuffer device driver. This issue arises when the information, such as info->screen_base, is not initialized correctly. In such cases, invoking the sh7760fb_free_mem() function fails to release the allocated memory, leading to a potential memory leak. The solution involves using dma_free_coherent() to properly free the memory. Addressing this vulnerability is crucial to maintaining the stability and efficiency of systems operating on affected kernel versions.

References