CVE-2024-50288

Description

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using > 32 buffers The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a must_blank array that was still sized for 32 (VIDEO_MAX_FRAME). This caused an out-of-bounds write when using buffer indices >= 32. Create a new define MAX_VID_CAP_BUFFERS that is used to access the must_blank array and set max_num_buffers for the video capture queue. This solves a crash reported by: https://bugzilla.kernel.org/show_bug.cgi?id=219258

Reserved 2024-10-21 | Published 2024-11-19 | Updated 2024-12-19 | Assigner Linux

Product status

Default status
unaffected

cea70ed416b428f8214be196d62cc7ffaa11f1b8 before e6bacd8f2178b22859fe6d9f755f19dfcd9d3862
affected

cea70ed416b428f8214be196d62cc7ffaa11f1b8 before 96d8569563916fe2f8fe17317e20e43f54f9ba4b
affected

Default status
affected

6.8
affected

Any version before 6.8
unaffected

6.11.8
unaffected

6.12
unaffected

References

git.kernel.org/...c/e6bacd8f2178b22859fe6d9f755f19dfcd9d3862

git.kernel.org/...c/96d8569563916fe2f8fe17317e20e43f54f9ba4b

cve.org (CVE-2024-50288)

nvd.nist.gov (CVE-2024-50288)

Download JSON