CVE-2024-50287

media: v4l2-tpg: prevent the risk of a division by zero

State: Published
Severity: 5.5 Medium
Published: Nov 19, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-tpg: prevent the risk of a division by zero

As reported by Coverity, the logic at tpg_precalculate_line() blindly rescales the buffer even when scaled_witdh is equal to zero. If this ever happens, this will cause a division by zero.

Instead, add a WARN_ON_ONCE() to trigger such cases and return without doing any precalculation.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-369 Divide By Zero

Affected Products

Product	Versions
LinuxLinux	63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before e3c36d0bde309f690ed1f9cd5f7e63b3a513f94aAffected 63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 0bfc6e38ee2250f0503d96f1a1de441c31d88715Affected 63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 054931ca3cfcb8e8fa036e887d6f379942b02565Affected 63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before a749c15dccc58d9cbad9cd23bd8ab4b5fa96cf47Affected 63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before c63c30c9d9f2c8de34b16cd2b8400240533b914eAffected 63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 2d0f01aa602fd15a805771bdf3f4d9a9b4df7f47Affected 63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 0cdb42ba0b28f548c1a4e86bb8489dba0d78fc21Affected 63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before e6a3ea83fbe15d4818d01804e904cbb0e64e543bAffected
LinuxLinux	3.18Affected before 3.18Not affected 4.19.324 through 4.19.Not affected 5.4.286 through 5.4.Not affected 5.10.230 through 5.10.Not affected 5.15.172 through 5.15.Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before e3c36d0bde309f690ed1f9cd5f7e63b3a513f94aAffected
63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 0bfc6e38ee2250f0503d96f1a1de441c31d88715Affected
63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 054931ca3cfcb8e8fa036e887d6f379942b02565Affected
63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before a749c15dccc58d9cbad9cd23bd8ab4b5fa96cf47Affected
63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before c63c30c9d9f2c8de34b16cd2b8400240533b914eAffected
63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 2d0f01aa602fd15a805771bdf3f4d9a9b4df7f47Affected
63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before 0cdb42ba0b28f548c1a4e86bb8489dba0d78fc21Affected
63881df94d3ecbb0deafa0b77da62ff2f32961c4 to before e6a3ea83fbe15d4818d01804e904cbb0e64e543bAffected

LinuxLinux

3.18Affected
before 3.18Not affected
4.19.324 through 4.19.*Not affected
5.4.286 through 5.4.*Not affected
5.10.230 through 5.10.*Not affected
5.15.172 through 5.15.*Not affected
6.1.117 through 6.1.*Not affected
6.6.61 through 6.6.*Not affected
6.11.8 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.