CVE-2024-53063
MEDIUMLinux Kernel 2.6.29-6.11.7 - Out-of-Bounds Memory Access in DVB Device Registration
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_register_device() won't check for boundaries, as it will rely that a previous call to dvb_register_adapter() would already be enforcing it. On a similar way, dvb_device_open() uses the assumption that the register functions already did the needed checks. This can be fragile if some device ends using different calls. This also generate warnings on static check analysers like Coverity. So, add explicit guards to prevent potential risk of OOM issues.
References (10)
Core 10
Core References
Scores
CVSS v3
5.5
EPSS
0.0027
EPSS Percentile
18.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-755
Status
published
Products (27)
linux/Kernel
2.6.29 - 4.19.324linux
linux/Kernel
4.20.0 - 5.4.286linux
linux/Kernel
5.11.0 - 5.15.172linux
linux/Kernel
5.16.0 - 6.1.117linux
linux/Kernel
5.5.0 - 5.10.230linux
linux/Kernel
6.2.0 - 6.6.61linux
linux/Kernel
6.7.0 - 6.11.8linux
Linux/Linux
< 2.6.29
Linux/Linux
2.6.29
Linux/Linux
4.19.324 - 4.19.*
... and 17 more
Published
Nov 19, 2024
Tracked Since
Feb 18, 2026