CVE-2024-47698

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure index in rtl2832_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->filters is a 32-bit value, so set_bit and clear_bit functions should only operate on indices from 0 to 31. If index is 32, it will attempt to access a non-existent 33rd bit, leading to out-of-bounds access. Change the boundary check from index > 32 to index >= 32 to resolve this issue. [hverkuil: added fixes tag, rtl2830_pid_filter -> rtl2832_pid_filter in logmsg]

Affected product and versions

Product

Linux Linux, debian linux, linux kernel

Affected versions

>= 4b01e01a81b6629878344430531ced347cc2ed5b < 7065c05c6d58b9b9a98127aa14e9a5ec68173918, >= 4b01e01a81b6629878344430531ced347cc2ed5b < 49b33c38d202d3327dcfd058e27f541dcc308b92, >= 4b01e01a81b6629878344430531ced347cc2ed5b < 6ae3b9aee42616ee93c4585174f40c767828006d, >= 4b01e01a81b6629878344430531ced347cc2ed5b < a879b6cdd48134a3d58949ea4f075c75fa2d7d71, >= 4b01e01a81b6629878344430531ced347cc2ed5b < 15bea004e939d938a6771dfcf2a26cc899ffd20a, >= 4b01e01a81b6629878344430531ced347cc2ed5b < 527ab3eb3b0b4a6ee00e183c1de6a730239e2835, >= 4b01e01a81b6629878344430531ced347cc2ed5b < 66dbe0df6eccc7ee53a2c35016ce81e13b3ff447, >= 4b01e01a81b6629878344430531ced347cc2ed5b < bedd42e07988dbdd124b23e758ffef7a681b9c60, >= 4b01e01a81b6629878344430531ced347cc2ed5b < 8ae06f360cfaca2b88b98ca89144548b3186aab1, >= 4.0, 11.0, >= 4.0 < 4.19.323, >= 4.20 < 5.4.285, >= 5.5 < 5.10.227, >= 5.11 < 5.15.168, >= 5.16 < 6.1.113, >= 6.2 < 6.6.54, >= 6.7 < 6.10.13, >= 6.11 < 6.11.2

Fixed versions

4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.113, 6.6.54, 6.10.13, 6.11.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787