CVE-2024-53081

media: ar0521: don't overflow when checking PLL values

State: Published
Severity: 5.5 Medium
Published: Nov 19, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

media: ar0521: don't overflow when checking PLL values

The PLL checks are comparing 64 bit integers with 32 bit ones, as reported by Coverity. Depending on the values of the variables, this may underflow.

Fix it ensuring that both sides of the expression are u64.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

Product	Versions
LinuxLinux	852b50aeed153b513c0b36298559114fab0fab80 to before 5e1523076acf95b4ea68d19b6f27e6891267cc24Affected 852b50aeed153b513c0b36298559114fab0fab80 to before a244b82d0ae60326901f2b50c15e3118298b7ecdAffected 852b50aeed153b513c0b36298559114fab0fab80 to before 97ed0c0332d5525653668b31acf62ff1e6b50784Affected 852b50aeed153b513c0b36298559114fab0fab80 to before 438d3085ba5b8b5bfa5290faa594e577f6ac9aa7Affected
LinuxLinux	6.0Affected before 6.0Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.