Riskcovery

CVE-2024-43877

media: pci: ivtv: Add check for DMA map result

State
Published
Severity
7.8 High
Published
Aug 21, 2024
Updated
Aug 5, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: pci: ivtv: Add check for DMA map result

In case DMA fails, 'dma->SG_length' is 0. This value is later used to access 'dma->SGarray[dma->SG_length - 1]', which will cause out of bounds access.

Add check to return early on invalid value. Adjust warnings accordingly.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4551236b55e80b2c1720b10b77e9400118b2339e to before 38f72c7e7c6b55614f9407555fd5ce9d019b0fa4Affected
  • 66c8a83bf1de2eb3eea4734c7eda22255a965f11 to before 81d0664bed91a858c7b50c263954b59d65f1b414Affected
  • 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to before 24062aa7407091dee3e45a8e8037df437e848718Affected
  • 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to before 3d8fd92939e21ff0d45100ab208f8124af79402aAffected
  • 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to before c766065e8272085ea9c436414b7ddf1f12e7787bAffected
  • 1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1 to before 629913d6d79508b166c66e07e4857e20233d85a9Affected
  • 1b00b7335000c0e107f774cc8ee4d5340f824f28Affected
  • 5.4.301 to before 5.5Affected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.103 through 6.1.*Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.