Medium 5.5Published May 1, 2024

CVE-2024-27074media: go7007: fix a memleak in go7007_load_encoder

Updated under an hour ago (Oct 27, 2026, 12:10 PM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encoder, bounce(i.e. go->boot_fw), is allocated without a deallocation thereafter. After the following call chain: saa7134_go7007_init |-> go7007_boot_encoder |-> go7007_load_encoder |-> kfree(go) go is freed and thus bounce is leaked.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	95ef39403f890360a3e48fe550d8e8e5d088ad74 builds before 7f11dd3d165b178e738fe73dfeea513e383bedb5; from 95ef39403f890360a3e48fe550d8e8e5d088ad74 before 291cda0b805fc0d6e90d201710311630c8667159; from 95ef39403f890360a3e48fe550d8e8e5d088ad74 before b49fe84c6cefcc1c2336d793b53442e716c95073; from 95ef39403f890360a3e48fe550d8e8e5d088ad74 before 790fa2c04dfb9f095ec372bf17909424d6e864b3; from 95ef39403f890360a3e48fe550d8e8e5d088ad74 before e04d15c8bb3e111dd69f98894acd92d63e87aac3; from 95ef39403f890360a3e48fe550d8e8e5d088ad74 before f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975; from 95ef39403f890360a3e48fe550d8e8e5d088ad74 before d43988a23c32588ccd0c74219637afb96cd78661; from 95ef39403f890360a3e48fe550d8e8e5d088ad74 before 7405a0d4442792988e9ae834e7d84f9d163731a4; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.10 before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/7f11dd3d165b178e738fe73dfeea513e383bedb5	patch
https://git.kernel.org/stable/c/291cda0b805fc0d6e90d201710311630c8667159	patch
https://git.kernel.org/stable/c/b49fe84c6cefcc1c2336d793b53442e716c95073	patch
https://git.kernel.org/stable/c/790fa2c04dfb9f095ec372bf17909424d6e864b3	patch
https://git.kernel.org/stable/c/e04d15c8bb3e111dd69f98894acd92d63e87aac3	patch
https://git.kernel.org/stable/c/f31c1cc37411f5f7bcb266133f9a7e1b4bdf2975	patch
https://git.kernel.org/stable/c/d43988a23c32588ccd0c74219637afb96cd78661	patch
https://git.kernel.org/stable/c/7405a0d4442792988e9ae834e7d84f9d163731a4	patch
https://git.kernel.org/stable/c/b9b683844b01d171a72b9c0419a2d760d946ee12	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	patch
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.