CVE-2024-50290

media: cx24116: prevent overflows on SNR calculus

State: Published
Severity: 5.5 Medium
Published: Nov 19, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: cx24116: prevent overflows on SNR calculus

as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers.

Prevent that.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

Product	Versions
LinuxLinux	8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 127b9076baeadd734b18ddc8f2cd93b47d5a3ea3Affected 8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before cad97ca8cfd43a78a19b59949f33e3563d369247Affected 8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 828047c70f4716fde4b1316f7b610e97a4e83824Affected 8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before f2b4f277c41db8d548f38f1dd091bbdf6a5acb07Affected 8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before fbefe31e4598cdb0889eee2e74c995b2212efb08Affected 8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 83c152b55d88cbf6fc4685941fcb31333986774dAffected 8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 3a1ed994d9454132354b860321414955da289929Affected 8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 576a307a7650bd544fbb24df801b9b7863b85e2fAffected
LinuxLinux	2.6.28Affected before 2.6.28Not affected 4.19.324 through 4.19.Not affected 5.4.286 through 5.4.Not affected 5.10.230 through 5.10.Not affected 5.15.172 through 5.15.Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 127b9076baeadd734b18ddc8f2cd93b47d5a3ea3Affected
8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before cad97ca8cfd43a78a19b59949f33e3563d369247Affected
8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 828047c70f4716fde4b1316f7b610e97a4e83824Affected
8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before f2b4f277c41db8d548f38f1dd091bbdf6a5acb07Affected
8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before fbefe31e4598cdb0889eee2e74c995b2212efb08Affected
8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 83c152b55d88cbf6fc4685941fcb31333986774dAffected
8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 3a1ed994d9454132354b860321414955da289929Affected
8953db793d5bdeea5ac92c9e97f57d3ff8a7dccf to before 576a307a7650bd544fbb24df801b9b7863b85e2fAffected

LinuxLinux

2.6.28Affected
before 2.6.28Not affected
4.19.324 through 4.19.*Not affected
5.4.286 through 5.4.*Not affected
5.10.230 through 5.10.*Not affected
5.15.172 through 5.15.*Not affected
6.1.117 through 6.1.*Not affected
6.6.61 through 6.6.*Not affected
6.11.8 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.