Riskcovery

CVE-2023-52764

media: gspca: cpia1: shift-out-of-bounds in set_flicker

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: gspca: cpia1: shift-out-of-bounds in set_flicker

Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int'

When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before 69bba62600bd91d6b7c1e8ca181faf8ac64f7060Affected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before 2eee8edfff90e22980a6b22079d238c3c9d323bbAffected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before 8f83c85ee88225319c52680792320c02158c2a9bAffected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before c6b6b8692218da73b33b310d7c1df90f115bdd9aAffected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before 09cd8b561aa9796903710a1046957f2b112c8f26Affected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before a647f27a7426d2fe1b40da7c8fa2b81354a51177Affected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before 93bddd6529f187f510eec759f37d0569243c9809Affected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before e2d7149b913d14352c82624e723ce1c211ca06d3Affected
  • 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 to before 099be1822d1f095433f4b08af9cc9d6308ec1953Affected
LinuxLinux
  • 2.6.34Affected
  • before 2.6.34Not affected
  • 4.14.331 through 4.14.*Not affected
  • 4.19.300 through 4.19.*Not affected
  • 5.4.262 through 5.4.*Not affected
  • 5.10.202 through 5.10.*Not affected
  • 5.15.140 through 5.15.*Not affected
  • 6.1.64 through 6.1.*Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.