Riskcovery

CVE-2024-39481

media: mc: Fix graph walk in media_pipeline_start

State
Published
Severity
7.8 High
Published
Jul 5, 2024
Updated
Aug 5, 2026
Reserved
Jun 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mc: Fix graph walk in media_pipeline_start

The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIA_LNK_FL_ANCILLARY_LINK link.

Fix this by allowing the walk to proceed only for MEDIA_LNK_FL_DATA_LINK links.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ae219872834a32da88408a92a4b4745c11f5a7ce to before 788fd0f11e45ae8d3a8ebbd3452a6e83f92db376Affected
  • ae219872834a32da88408a92a4b4745c11f5a7ce to before e80d9db99b7b6c697d8d952dfd25c3425cf61499Affected
  • ae219872834a32da88408a92a4b4745c11f5a7ce to before bee9440bc0b6b3b7432f7bfde28656262a3484a2Affected
  • ae219872834a32da88408a92a4b4745c11f5a7ce to before 8a9d420149c477e7c97fbd6453704e4612bdd3faAffected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.94 through 6.1.*Not affected
  • 6.6.34 through 6.6.*Not affected
  • 6.9.5 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.