CVE-2024-47698: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
In the Linux kernel, the following vulnerability has been resolved:
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
Ensure index in rtl2832pidfilter does not exceed 31 to prevent out-of-bounds access.
dev->filters is a 32-bit value, so setbit and clearbit functions should only operate on indices from 0 to 31. If index is 32, it will attempt to access a non-existent 33rd bit, leading to out-of-bounds access. Change the boundary check from index > 32 to index >= 32 to resolve this issue.
[hverkuil: added fixes tag, rtl2830pidfilter -> rtl2832pidfilter in logmsg]
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
Change the boundary check in rtl2832_pid_filter from `index > 32` to `index >= 32` so that `index` cannot reach the case where it would access a non-existent 33rd bit.
Linux kernel (drivers: media: dvb-frontends/rtl2832) rtl2832_pid_filter boundary check = index > 32 -> index >= 32 - Configuration
Ensure `index` in `rtl2832_pid_filter` never exceeds 31, because `dev->filters` is a 32-bit value and `set_bit`/`clear_bit` must only operate on indices from 0 to 31.
Linux kernel (drivers: media: dvb-frontends/rtl2832) rtl2832_pid_filter index range = ensure index does not exceed 31
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47698?
CVE-2024-47698 has been classified as a medium severity vulnerability.
How do I fix CVE-2024-47698?
To mitigate CVE-2024-47698, update the Linux kernel to a version that incorporates the fix.
Which versions of the Linux kernel are affected by CVE-2024-47698?
CVE-2024-47698 affects various versions of the Linux kernel, specifically from 4.0 up to 6.11.2, excluding certain patched versions.
What is the nature of the vulnerability in CVE-2024-47698?
CVE-2024-47698 involves an out-of-bounds write error in the rtl2832 PID filter within the Linux kernel.
How can I determine if my system is vulnerable to CVE-2024-47698?
You can check if your Linux kernel version is within the affected range to assess the vulnerability of your system.