CVE-2024-53081

MEDIUM

Linux Kernel < 6.1.117 - Integer Underflow

Title source: rule
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bit integers with 32 bit ones, as reported by Coverity. Depending on the values of the variables, this may underflow. Fix it ensuring that both sides of the expression are u64.

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 17.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-191
Status published
Products (5)
linux/Kernel 6.0.0 - 6.1.117linux
linux/Kernel 6.2.0 - 6.6.61linux
linux/Kernel 6.7.0 - 6.11.8linux
linux/linux_kernel 6.12 rc1 (6 CPE variants)
linux/linux_kernel 6.0 - 6.1.117
Published Nov 19, 2024
Tracked Since Feb 18, 2026