CVE-2024-47697

Severity CVSS v4.0:
Pending analysis
Type:
CWE-787 Out-of-bounds Write
Publication date:
21/10/2024
Last modified:
08/11/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error<br /> <br /> Ensure index in rtl2830_pid_filter does not exceed 31 to prevent<br /> out-of-bounds access.<br /> <br /> dev-&gt;filters is a 32-bit value, so set_bit and clear_bit functions should<br /> only operate on indices from 0 to 31. If index is 32, it will attempt to<br /> access a non-existent 33rd bit, leading to out-of-bounds access.<br /> Change the boundary check from index &gt; 32 to index &gt;= 32 to resolve this<br /> issue.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.0 (including) 5.10.227 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.168 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.113 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.54 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.10.13 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.11 (including) 6.11.2 (excluding)