Back to CVE records
Medium 5.5Published Jul 12, 2024
CVE-2024-40934HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak on logi_dj_recv_send_report() error path.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from cf48a7ba5c095f76bb9c1951f120fa048442422f before 15122dc140d82c51c216535c57b044c4587aae45; from e38a6f12685d8a2189b72078f6254b069ff84650 before caa9c9acb93db7ad7b74b157cf101579bac9596d; from 4fb28379b3c735398b252a979c991b340baa6b5b before a0503757947f2e46e59c1962326b53b3208c8213; from 6e59609541514d2ed3472f5bc999c55bdb6144ee before 789c99a1d7d2c8f6096d75fc2930505840ec9ea0; from 6f20d3261265885f6a6be4cda49d7019728760e0 before f677ca8cfefee2a729ca315f660cd4868abdf8de; 6f20d3261265885f6a6be4cda49d7019728760e0 builds before 1df2ead5dfad5f8f92467bd94889392d53100b98; from 6f20d3261265885f6a6be4cda49d7019728760e0 before ce3af2ee95170b7d9e15fff6e500d67deab1e7b3; 144becd79c196f02143ca71fc10766bd0cc660a1; and 7 more ranges | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 5.4.257 before 5.4.279; from 5.10.195 before 5.10.221; from 5.15.132 before 5.15.162; from 6.1.53 before 6.1.95; from 6.6 before 6.6.35; from 6.7 before 6.9.6; 6.10; 6.10 | NVD |
References
- https://git.kernel.org/stable/c/15122dc140d82c51c216535c57b044c4587aae45patch
- https://git.kernel.org/stable/c/caa9c9acb93db7ad7b74b157cf101579bac9596dpatch
- https://git.kernel.org/stable/c/a0503757947f2e46e59c1962326b53b3208c8213patch
- https://git.kernel.org/stable/c/789c99a1d7d2c8f6096d75fc2930505840ec9ea0patch
- https://git.kernel.org/stable/c/f677ca8cfefee2a729ca315f660cd4868abdf8depatch
- https://git.kernel.org/stable/c/1df2ead5dfad5f8f92467bd94889392d53100b98patch
- https://git.kernel.org/stable/c/ce3af2ee95170b7d9e15fff6e500d67deab1e7b3patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.