SB2024111948 - Integer underflow in Linux kernel media dvb-frontends driver
Published: November 19, 2024 Updated: May 12, 2025
Security Bulletin ID
SB2024111948
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Integer underflow (CVE-ID: CVE-2024-50290)
The vulnerability allows a local user to execute arbitrary code.
The vulnerability exists due to integer underflow within the cx24116_read_snr_pct() function in drivers/media/dvb-frontends/cx24116.c. A local user can execute arbitrary code.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/127b9076baeadd734b18ddc8f2cd93b47d5a3ea3
- https://git.kernel.org/stable/c/cad97ca8cfd43a78a19b59949f33e3563d369247
- https://git.kernel.org/stable/c/828047c70f4716fde4b1316f7b610e97a4e83824
- https://git.kernel.org/stable/c/f2b4f277c41db8d548f38f1dd091bbdf6a5acb07
- https://git.kernel.org/stable/c/fbefe31e4598cdb0889eee2e74c995b2212efb08
- https://git.kernel.org/stable/c/83c152b55d88cbf6fc4685941fcb31333986774d
- https://git.kernel.org/stable/c/3a1ed994d9454132354b860321414955da289929
- https://git.kernel.org/stable/c/576a307a7650bd544fbb24df801b9b7863b85e2f
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.324
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.230
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.172
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.286
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.117
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.8
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.61