PT-2024-28082

CVE-2024-38611

·

Published

2024-04-10

·

Updated

2026-08-04

Description by

CVSS 3.1
7.3
High
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the Linux kernel, specifically with the media: i2c: et8ek8 driver. When the driver is built-in and the remove function is used with exit, the remove callback is discarded, resulting in resource leaks when the device is unbound. This is fixed by compiling in the remove callback unconditionally, which also resolves a W=1 modpost warning related to a section mismatch reference.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
DLA-4178-1
DLA-4193-1
DSA-5900-1
ECHO-8FE8-99A5-DB5B
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1941
OESA-2024-1942
OESA-2024-1944
OESA-2024-2076
OESA-2024-2258
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6949-1
USN-6949-2
USN-6952-1
USN-6952-2
USN-6955-1
USN-7069-1
USN-7069-2
USN-7088-1
USN-7088-2
USN-7088-3
USN-7088-4
USN-7088-5
USN-7100-1
USN-7100-2
USN-7119-1
USN-7123-1
USN-7144-1
USN-7194-1
Found an issue in the description? Have something to add? Feel free to write us 👾