CVE-2024-57980 media: uvcvideo: Fix double free in error path

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2024-57980 and CVE-2024-58002 Address Vulnerabilities in uvcvideo Two vulnerabilities, CVE-2024-57980 and CVE-2024-58002, were published on February 27, 2025, affecting the uvcvideo driver. CVE-2024-57980 involves a double free in the error path, while CVE-2024-58002 addresses the removal of dangling pointers. Both issues could impact systems utilizing the affected driver. 2 sources 39