CVE-2024-24861: Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()
A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000getfrequency() function. This can result in return value overflow issue, possibly leading to malfunction or denial of service issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24861?
CVE-2024-24861 is considered to have a high severity due to its potential to cause denial of service or system malfunction.
How do I fix CVE-2024-24861?
To address CVE-2024-24861, updating the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1 is recommended.
Which Linux kernel versions are affected by CVE-2024-24861?
CVE-2024-24861 affects Linux kernel versions up to 3.0.101 and versions from 6.0 to 6.7.2.
What is a race condition as seen in CVE-2024-24861?
A race condition occurs when multiple processes access shared data simultaneously, potentially leading to inconsistent outcomes, such as the overflow issue in CVE-2024-24861.
Is CVE-2024-24861 specific to any device drivers?
Yes, CVE-2024-24861 specifically affects the media/xc4000 device driver in the Linux kernel.