In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_VIDEO_ET8EK8=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/media/i2c/et8ek8/et8ek8: section mismatch in reference: et8ek8_i2c_driver+0x10 (section: .data) -> et8ek8_remove (section: .exit.text)

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/04d1086a62ac492ebb6bb0c94c1c8cb55f5d1f36 cve-icon cve-icon
https://git.kernel.org/stable/c/43fff07e4b1956d0e5cf23717507e438278ea3d9 cve-icon cve-icon
https://git.kernel.org/stable/c/545b215736c5c4b354e182d99c578a472ac9bfce cve-icon cve-icon
https://git.kernel.org/stable/c/904db2ba44ae60641b6378c5013254d09acf5e80 cve-icon cve-icon
https://git.kernel.org/stable/c/963523600d9f1e36bc35ba774c2493d6baa4dd8f cve-icon cve-icon
https://git.kernel.org/stable/c/c1a3803e5bb91c13e9ad582003e4288f67f06cd9 cve-icon cve-icon
https://git.kernel.org/stable/c/ece3fc1c10197052044048bea4f13cfdcf25b416 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024061921-CVE-2024-38611-bb0f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-38611 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-38611 cve-icon
History

Thu, 10 Apr 2025 13:15:00 +0000

Type Values Removed Values Added
References

Mon, 07 Apr 2025 08:45:00 +0000

Type Values Removed Values Added
References

Wed, 06 Nov 2024 08:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-19T13:56:12.742Z

Updated: 2025-05-04T09:15:15.931Z

Reserved: 2024-06-18T19:36:34.942Z

Link: CVE-2024-38611

cve-icon Vulnrichment

Updated: 2024-08-02T04:12:26.122Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-06-19T14:15:20.980

Modified: 2025-04-10T13:15:44.790

Link: CVE-2024-38611

cve-icon Redhat

Severity : Low

Publid Date: 2024-06-19T00:00:00Z

Links: CVE-2024-38611 - Bugzilla