CVE-2024-38611

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-38611
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-38611.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-38611
Downstream
Related
Published
2024-06-19T13:56:12.742Z
Modified
2025-11-28T02:34:04.457102Z
Summary
media: i2c: et8ek8: Don't strip remove function when driver is builtin
Details

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: et8ek8: Don't strip remove function when driver is builtin

Using _exit for the remove function results in the remove callback being discarded with CONFIGVIDEO_ET8EK8=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally.

This also fixes a W=1 modpost warning:

WARNING: modpost: drivers/media/i2c/et8ek8/et8ek8: section mismatch in reference: et8ek8_i2c_driver+0x10 (section: .data) -> et8ek8_remove (section: .exit.text)
Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38611.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c5254e72b8edc2ca0a98703e92e8c34959343d2c
Fixed
963523600d9f1e36bc35ba774c2493d6baa4dd8f
Fixed
ece3fc1c10197052044048bea4f13cfdcf25b416
Fixed
04d1086a62ac492ebb6bb0c94c1c8cb55f5d1f36
Fixed
c1a3803e5bb91c13e9ad582003e4288f67f06cd9
Fixed
43fff07e4b1956d0e5cf23717507e438278ea3d9
Fixed
904db2ba44ae60641b6378c5013254d09acf5e80
Fixed
545b215736c5c4b354e182d99c578a472ac9bfce

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.11.0
Fixed
5.10.236
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.180
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.133
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.33
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.12
Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.9.3