CVE-2024-39481
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-39481
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39481.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-39481
- Downstream
- Related
- Published
- 2024-07-05T06:55:09Z
- Modified
- 2025-10-15T11:41:37.422816Z
- Summary
- media: mc: Fix graph walk in media_pipeline_start
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
media: mc: Fix graph walk in mediapipelinestart
The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link.
Fix this by allowing the walk to proceed only for MEDIALNKFLDATALINK links.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/788fd0f11e45ae8d3a8ebbd3452a6e83f92db376
- https://git.kernel.org/stable/c/8a9d420149c477e7c97fbd6453704e4612bdd3fa
- https://git.kernel.org/stable/c/bee9440bc0b6b3b7432f7bfde28656262a3484a2
- https://git.kernel.org/stable/c/e80d9db99b7b6c697d8d952dfd25c3425cf61499
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedae219872834a32da88408a92a4b4745c11f5a7ceFixed788fd0f11e45ae8d3a8ebbd3452a6e83f92db376
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedae219872834a32da88408a92a4b4745c11f5a7ceFixede80d9db99b7b6c697d8d952dfd25c3425cf61499
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedae219872834a32da88408a92a4b4745c11f5a7ceFixedbee9440bc0b6b3b7432f7bfde28656262a3484a2
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedae219872834a32da88408a92a4b4745c11f5a7ceFixed8a9d420149c477e7c97fbd6453704e4612bdd3fa
Affected versions
v6.*
v6.0
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bee9440bc0b6b3b7432f7bfde28656262a3484a2",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c"
},
"digest": {
"line_hashes": [
"275264846748403978398455974688083560223",
"201722629592419323969175305152032284822",
"269664791972900310827078686106915326730"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-39481-0f100c1a"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@788fd0f11e45ae8d3a8ebbd3452a6e83f92db376",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c",
"function": "media_pipeline_explore_next_link"
},
"digest": {
"length": 1478.0,
"function_hash": "198509150714511408173315960856290111144"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-39481-3dd0dcf3"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e80d9db99b7b6c697d8d952dfd25c3425cf61499",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c"
},
"digest": {
"line_hashes": [
"275264846748403978398455974688083560223",
"201722629592419323969175305152032284822",
"269664791972900310827078686106915326730"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-39481-831cc9d7"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e80d9db99b7b6c697d8d952dfd25c3425cf61499",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c",
"function": "media_pipeline_explore_next_link"
},
"digest": {
"length": 1478.0,
"function_hash": "198509150714511408173315960856290111144"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-39481-9c4a792f"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@788fd0f11e45ae8d3a8ebbd3452a6e83f92db376",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c"
},
"digest": {
"line_hashes": [
"275264846748403978398455974688083560223",
"201722629592419323969175305152032284822",
"269664791972900310827078686106915326730"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-39481-abb0c895"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a9d420149c477e7c97fbd6453704e4612bdd3fa",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c"
},
"digest": {
"line_hashes": [
"275264846748403978398455974688083560223",
"201722629592419323969175305152032284822",
"269664791972900310827078686106915326730"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-39481-d1b33405"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bee9440bc0b6b3b7432f7bfde28656262a3484a2",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c",
"function": "media_pipeline_explore_next_link"
},
"digest": {
"length": 1478.0,
"function_hash": "198509150714511408173315960856290111144"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-39481-df59045c"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a9d420149c477e7c97fbd6453704e4612bdd3fa",
"signature_version": "v1",
"target": {
"file": "drivers/media/mc/mc-entity.c",
"function": "media_pipeline_explore_next_link"
},
"digest": {
"length": 1478.0,
"function_hash": "198509150714511408173315960856290111144"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-39481-ef28a461"
}
]