CVE-2024-53063
MEDIUMLinux Kernel < 4.19.324 - Improper Exception Handling
Title source: ruleDescription
In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_register_device() won't check for boundaries, as it will rely that a previous call to dvb_register_adapter() would already be enforcing it. On a similar way, dvb_device_open() uses the assumption that the register functions already did the needed checks. This can be fragile if some device ends using different calls. This also generate warnings on static check analysers like Coverity. So, add explicit guards to prevent potential risk of OOM issues.
References (10)
Scores
CVSS v3
5.5
EPSS
0.0002
EPSS Percentile
3.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-755
Status
published
Products (9)
linux/Kernel
2.6.29 - 4.19.324linux
linux/Kernel
4.20.0 - 5.4.286linux
linux/Kernel
5.11.0 - 5.15.172linux
linux/Kernel
5.16.0 - 6.1.117linux
linux/Kernel
5.5.0 - 5.10.230linux
linux/Kernel
6.2.0 - 6.6.61linux
linux/Kernel
6.7.0 - 6.11.8linux
linux/linux_kernel
6.12 rc1 (6 CPE variants)
linux/linux_kernel
2.6.29 - 4.19.324
Published
Nov 19, 2024
Tracked Since
Feb 18, 2026