Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43877
HistoryAug 21, 2024 - 12:06 a.m.

CVE-2024-43877 media: pci: ivtv: Add check for DMA map result

2024-08-2100:06:29
Linux
github.com
2
linux kernel
vulnerability
media
pci
ivtv
dma map
out of bounds access
linux verification center
svace

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

media: pci: ivtv: Add check for DMA map result

In case DMA fails, ‘dma->SG_length’ is 0. This value is later used to
access ‘dma->SGarray[dma->SG_length - 1]’, which will cause out of
bounds access.

Add check to return early on invalid value. Adjust warnings accordingly.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-43877