CVE-2024-47697

drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error

State: Published
Severity: 7.8 High
Published: Oct 21, 2024
Updated: Oct 15, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error

Ensure index in rtl2830_pid_filter does not exceed 31 to prevent out-of-bounds access.

dev->filters is a 32-bit value, so set_bit and clear_bit functions should only operate on indices from 0 to 31. If index is 32, it will attempt to access a non-existent 33rd bit, leading to out-of-bounds access. Change the boundary check from index > 32 to index >= 32 to resolve this issue.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 8ffbe7d07b8e76193b151107878ddc1ccc94deb5Affected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 883f794c6e498ae24680aead55c16f66b06cfc30Affected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before badbd736e6649c4e6d7b4ff7e2b9857acfa9ea94Affected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 86d920d2600c3a48efc2775c1666c1017eec6956Affected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 3dba83d3c81de1368d15a39f22df7b53e306052fAffected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 58f31be7dfbc0c84a6497ad51924949cf64b86a2Affected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 7fd6aae7e53b94f4035b1bfce28b8dfa0d0ae470Affected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 042b101d7bf70616c4967c286ffa6fcca65babfbAffected df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 46d7ebfe6a75a454a5fa28604f0ef1491f9d8d14Affected
LinuxLinux	4.0Affected before 4.0Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.54 through 6.6.Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 8ffbe7d07b8e76193b151107878ddc1ccc94deb5Affected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 883f794c6e498ae24680aead55c16f66b06cfc30Affected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before badbd736e6649c4e6d7b4ff7e2b9857acfa9ea94Affected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 86d920d2600c3a48efc2775c1666c1017eec6956Affected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 3dba83d3c81de1368d15a39f22df7b53e306052fAffected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 58f31be7dfbc0c84a6497ad51924949cf64b86a2Affected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 7fd6aae7e53b94f4035b1bfce28b8dfa0d0ae470Affected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 042b101d7bf70616c4967c286ffa6fcca65babfbAffected
df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 46d7ebfe6a75a454a5fa28604f0ef1491f9d8d14Affected

LinuxLinux

4.0Affected
before 4.0Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.54 through 6.6.*Not affected
6.10.13 through 6.10.*Not affected
6.11.2 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.