CVE-2024-40934
Logitech DJ HID Memory Leak
Description
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak on logi_dj_recv_send_report() error path.
INFO
Published Date :
July 12, 2024, 1:15 p.m.
Last Modified :
Aug. 28, 2024, 7:49 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-40934.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-40934 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-40934 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Aug. 28, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/15122dc140d82c51c216535c57b044c4587aae45 No Types Assigned https://git.kernel.org/stable/c/15122dc140d82c51c216535c57b044c4587aae45 Patch Changed Reference Type https://git.kernel.org/stable/c/1df2ead5dfad5f8f92467bd94889392d53100b98 No Types Assigned https://git.kernel.org/stable/c/1df2ead5dfad5f8f92467bd94889392d53100b98 Patch Changed Reference Type https://git.kernel.org/stable/c/789c99a1d7d2c8f6096d75fc2930505840ec9ea0 No Types Assigned https://git.kernel.org/stable/c/789c99a1d7d2c8f6096d75fc2930505840ec9ea0 Patch Changed Reference Type https://git.kernel.org/stable/c/a0503757947f2e46e59c1962326b53b3208c8213 No Types Assigned https://git.kernel.org/stable/c/a0503757947f2e46e59c1962326b53b3208c8213 Patch Changed Reference Type https://git.kernel.org/stable/c/caa9c9acb93db7ad7b74b157cf101579bac9596d No Types Assigned https://git.kernel.org/stable/c/caa9c9acb93db7ad7b74b157cf101579bac9596d Patch Changed Reference Type https://git.kernel.org/stable/c/ce3af2ee95170b7d9e15fff6e500d67deab1e7b3 No Types Assigned https://git.kernel.org/stable/c/ce3af2ee95170b7d9e15fff6e500d67deab1e7b3 Patch Changed Reference Type https://git.kernel.org/stable/c/f677ca8cfefee2a729ca315f660cd4868abdf8de No Types Assigned https://git.kernel.org/stable/c/f677ca8cfefee2a729ca315f660cd4868abdf8de Patch Added CWE NIST CWE-401 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4.257 up to (excluding) 5.4.279 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.10.195 up to (excluding) 5.10.221 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.15.132 up to (excluding) 5.15.162 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.1.53 up to (excluding) 6.1.95 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6 up to (excluding) 6.6.35 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.9.6 *cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:* -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jul. 12, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak on logi_dj_recv_send_report() error path. Added Reference kernel.org https://git.kernel.org/stable/c/15122dc140d82c51c216535c57b044c4587aae45 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/caa9c9acb93db7ad7b74b157cf101579bac9596d [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a0503757947f2e46e59c1962326b53b3208c8213 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/789c99a1d7d2c8f6096d75fc2930505840ec9ea0 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/f677ca8cfefee2a729ca315f660cd4868abdf8de [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/1df2ead5dfad5f8f92467bd94889392d53100b98 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ce3af2ee95170b7d9e15fff6e500d67deab1e7b3 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-40934 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-40934
weaknesses.