Lucene search

K
osvGoogleOSV:CVE-2024-43877
HistoryAug 21, 2024 - 1:15 a.m.

CVE-2024-43877

2024-08-2101:15:12
Google
osv.dev
linux kernel
media pci
ivtv
vulnerability
resolved
dma
linux verification center
svace

AI Score

7.1

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved:

media: pci: ivtv: Add check for DMA map result

In case DMA fails, ‘dma->SG_length’ is 0. This value is later used to
access ‘dma->SGarray[dma->SG_length - 1]’, which will cause out of
bounds access.

Add check to return early on invalid value. Adjust warnings accordingly.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

AI Score

7.1

Confidence

Low