CVE-2024-27075: media: dvb-frontends: avoid stack overflow warnings with clang
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: avoid stack overflow warnings with clang
A previous patch worked around a KASAN issue in stv0367, now a similar problem showed up with clang:
drivers/media/dvb-frontends/stv0367.c:1222:12: error: stack frame size (3624) exceeds limit (2048) in 'stv0367tersetfrontend' [-Werror,-Wframe-larger-than] 1214 | static int stv0367tersetfrontend(struct dvbfrontend fe)
Rework the stv0367writereg() function to be simpler and mark both register access functions as noinlineforstack so the temporary i2cmsg structures do not get duplicated on the stack when KASANSTACK is enabled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27075?
CVE-2024-27075 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-27075?
To address CVE-2024-27075, upgrade to the latest patched versions of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2024-27075?
CVE-2024-27075 affects the Linux kernel in specific versions noted in the vulnerability report.
Is CVE-2024-27075 related to stack overflow issues?
Yes, CVE-2024-27075 addresses stack overflow warnings that were occurring with the use of the clang compiler.
What component of the Linux kernel does CVE-2024-27075 affect?
CVE-2024-27075 affects the media drivers, particularly the dvb-frontends in the Linux kernel.