U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2024-38611 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_VIDEO_ET8EK8=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/media/i2c/et8ek8/et8ek8: section mismatch in reference: et8ek8_i2c_driver+0x10 (section: .data) -> et8ek8_remove (section: .exit.text)


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink Resource
https://git.kernel.org/stable/c/43fff07e4b1956d0e5cf23717507e438278ea3d9
https://git.kernel.org/stable/c/43fff07e4b1956d0e5cf23717507e438278ea3d9
https://git.kernel.org/stable/c/545b215736c5c4b354e182d99c578a472ac9bfce
https://git.kernel.org/stable/c/545b215736c5c4b354e182d99c578a472ac9bfce
https://git.kernel.org/stable/c/904db2ba44ae60641b6378c5013254d09acf5e80
https://git.kernel.org/stable/c/904db2ba44ae60641b6378c5013254d09acf5e80
https://git.kernel.org/stable/c/c1a3803e5bb91c13e9ad582003e4288f67f06cd9
https://git.kernel.org/stable/c/c1a3803e5bb91c13e9ad582003e4288f67f06cd9

Weakness Enumeration

CWE-ID CWE Name Source

Change History

2 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2024-38611
NVD Published Date:
06/19/2024
NVD Last Modified:
11/21/2024
Source:
kernel.org