CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning

Q: What is the severity of CVE-2024-47752?

CVE-2024-47752 has not been assigned a specific severity rating but can lead to kernel crashes.

Q: How do I fix CVE-2024-47752?

To fix CVE-2024-47752, update the Linux kernel to the latest stable version that includes the patch.

Q: What are the affected software versions for CVE-2024-47752?

CVE-2024-47752 affects Linux kernel versions between 5.16 and 6.6.54, 6.7 and 6.10.13, and 6.11 and 6.11.2.

Q: What is the impact of CVE-2024-47752?

The impact of CVE-2024-47752 is a potential kernel crash when the fb parameter is NULL.

Q: When was CVE-2024-47752 discovered?

The specifics of when CVE-2024-47752 was discovered are not detailed, but it has been addressed in the Linux kernel updates.

Published Oct 21, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Fix H264 stateless decoder smatch warning

Fix a smatch static checker warning on vdech264reqif.c. Which leads to a kernel crash when fb is NULL.

Other sources

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

— Launchpad

Affected Software

11 affected componentsFixes available

Linux Linux kernel>=5.16<6.6.54

Linux Linux kernel>=6.7<6.10.13

Linux Linux kernel>=6.11<6.11.2

debian/linux*

debian/linux<6.11.2-1

6.11.2-1

debian/linux<6.11.2-1

6.11.2-1

linux/kernel>=5.16.0<6.1.191

6.1.191

linux/kernel>=6.2.0<6.6.54

6.6.54

linux/kernel>=6.7.0<6.10.13

6.10.13

linux/kernel>=6.11.0<6.11.2

6.11.2

debian/linux<=6.1.176-1, <=6.1.190-1

6.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.11.2-1
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.191
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.54
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.10.13
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.11.2
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1

Event History

Oct 21, 2024

CVE Published

via MITRE·12:14 PM

Data Sourced

via MITRE·12:14 PM

Description

Data Sourced

via OSV·12:14 PM

DescriptionAffected Software

Data Sourced

via NVD·01:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·01:15 PM

Severity

Frequently Asked Questions

What is the severity of CVE-2024-47752?

CVE-2024-47752 has not been assigned a specific severity rating but can lead to kernel crashes.

How do I fix CVE-2024-47752?

To fix CVE-2024-47752, update the Linux kernel to the latest stable version that includes the patch.

What are the affected software versions for CVE-2024-47752?

CVE-2024-47752 affects Linux kernel versions between 5.16 and 6.6.54, 6.7 and 6.10.13, and 6.11 and 6.11.2.

What is the impact of CVE-2024-47752?

The impact of CVE-2024-47752 is a potential kernel crash when the fb parameter is NULL.

When was CVE-2024-47752 discovered?

The specifics of when CVE-2024-47752 was discovered are not detailed, but it has been addressed in the Linux kernel updates.

CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2024-47752?

How do I fix CVE-2024-47752?

What are the affected software versions for CVE-2024-47752?

What is the impact of CVE-2024-47752?

When was CVE-2024-47752 discovered?

Company

Resources

Contact