Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
Linux kernel 6.6.157.1-1 can leak memory and cause instability
published 2 years ago
Summary
The Linux kernel version 6.6.157.1-1 has a coding error in its graphics driver that can leave memory allocated when a request fails. This leftover memory can lead to crashes or reduced performance. Apply the latest kernel updates that include the fix to release the memory properly.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
| Azure Linux:3 | – | kernel |
<= 6.6.157.1-1 <= 6.6.152.1-1 |
Original advisory text
CVE-2024-49972 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Deallocate DML memory if allocation fails
[Why]
When DC state create DML memory allocation fails, memory is not
deallocated subsequently, resulting in uninitialized structure
that is not NULL.
[How]
Deallocate memory if DML memory allocation fails.
drm/amd/display: Deallocate DML memory if allocation fails
[Why]
When DC state create DML memory allocation fails, memory is not
deallocated subsequently, resulting in uninitialized structure
that is not NULL.
[How]
Deallocate memory if DML memory allocation fails.
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published21 Oct 2024
Updated24 Sep 2026
First seen23 Sep 2026
Sources
AZL-52041 · OSV
Track software like this
Free during beta