CVE-2024-53076
kernel: iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · November 19, 2024
Updated · September 28, 2026
Description
A flaw was found in the Linux kernel's Industrial I/O (IIO) subsystem. This vulnerability allows a local user to cause a Denial of Service (DoS) due to improper resource cleanup. When a memory allocation failure occurs during scale table initialization in the GTS (Gain-Time-Scale) helper module, the error-handling path fails to release previously allocated memory buffers. Over time, repeated failures can exhaust available system memory and disrupt system availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 · Missing Release of Memory after Effective Lifetime