CVE-2024-50291: media: dvb-core: add missing buffer index check
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-core: add missing buffer index check
dvbvb2expbuf() didn't check if the given buffer index was for a valid buffer. Add this check.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50291?
CVE-2024-50291 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50291?
To fix CVE-2024-50291, upgrade to a patched version of the Linux kernel that includes the buffer index check.
Which versions of the Linux kernel are affected by CVE-2024-50291?
CVE-2024-50291 affects Linux kernel versions from 6.8 to 6.11.8 and all 6.12 release candidates.
What is the impact of CVE-2024-50291?
The impact of CVE-2024-50291 is that it may allow an attacker to exploit a buffer index issue in the dvb-core media subsystem.
Is there a workaround for CVE-2024-50291?
There are no specific workarounds recommended for CVE-2024-50291; the best approach is to apply the available updates.