CVE-2024-43877: media: pci: ivtv: Add check for DMA map result
In the Linux kernel, the following vulnerability has been resolved:
media: pci: ivtv: Add check for DMA map result
In case DMA fails, 'dma->SGlength' is 0. This value is later used to access 'dma->SGarray[dma->SGlength - 1]', which will cause out of bounds access.
Add check to return early on invalid value. Adjust warnings accordingly.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
In drivers/media/pci/ivtv, add a check for the DMA map result and, in the failure case where 'dma->SG_length' is 0, return early before accessing 'dma->SGarray[dma->SG_length - 1]' to prevent out-of-bounds access. Adjust any warnings accordingly.
Linux kernel (media: pci: ivtv) DMA SG_length validation = Return early / add check when dma->SG_length is 0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43877?
CVE-2024-43877 is classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-43877?
To fix CVE-2024-43877, update to the fixed versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.11-1.
What systems are affected by CVE-2024-43877?
CVE-2024-43877 affects various distributions of the Linux kernel including Debian packages.
What does CVE-2024-43877 exploit?
CVE-2024-43877 exploits an out of bounds access due to improper checks on the DMA map result.
Is there a workaround for CVE-2024-43877?
There is no official workaround for CVE-2024-43877; the recommended action is to apply the updates.