Back to CVE records
Medium 5.5Published Aug 21, 2024
CVE-2024-43871devres: Fix memory leakage caused by driver API devm_free_percpu()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 8 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from ff86aae3b4112b85d2231c23bccbc49589df1c06 before 700e8abd65b10792b2f179ce4e858f2ca2880f85; from ff86aae3b4112b85d2231c23bccbc49589df1c06 before b044588a16a978cd891cb3d665dd7ae06850d5bf; from ff86aae3b4112b85d2231c23bccbc49589df1c06 before ef56dcdca8f2a53abc3a83d388b8336447533d85; from ff86aae3b4112b85d2231c23bccbc49589df1c06 before 3047f99caec240a88ccd06197af2868da1af6a96; from ff86aae3b4112b85d2231c23bccbc49589df1c06 before 3dcd0673e47664bc6c719ad47dadac6d55d5950d; from ff86aae3b4112b85d2231c23bccbc49589df1c06 before b67552d7c61f52f1271031adfa7834545ae99701; from ff86aae3b4112b85d2231c23bccbc49589df1c06 before 95065edb8ebb27771d5f1e898eef6ab43dc6c87c; from ff86aae3b4112b85d2231c23bccbc49589df1c06 before bd50a974097bb82d52a458bd3ee39fb723129a0c | CNA record |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V3.1 | CISA ADP |
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name) | all versions not affected | CISA ADP |
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name) | before V3.1 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 4.10 before 4.19.320; from 4.20 before 5.4.282; from 5.5 before 5.10.224; from 5.11 before 5.15.165; from 5.16 before 6.1.103; from 6.2 before 6.6.44; from 6.7 before 6.10.3 | NVD |
References
- https://git.kernel.org/stable/c/700e8abd65b10792b2f179ce4e858f2ca2880f85patch
- https://git.kernel.org/stable/c/b044588a16a978cd891cb3d665dd7ae06850d5bfpatch
- https://git.kernel.org/stable/c/ef56dcdca8f2a53abc3a83d388b8336447533d85patch
- https://git.kernel.org/stable/c/3047f99caec240a88ccd06197af2868da1af6a96patch
- https://git.kernel.org/stable/c/3dcd0673e47664bc6c719ad47dadac6d55d5950dpatch
- https://git.kernel.org/stable/c/b67552d7c61f52f1271031adfa7834545ae99701patch
- https://git.kernel.org/stable/c/95065edb8ebb27771d5f1e898eef6ab43dc6c87cpatch
- https://git.kernel.org/stable/c/bd50a974097bb82d52a458bd3ee39fb723129a0cpatch
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.