CVE-2024-43877

Source
https://cve.org/CVERecord?id=CVE-2024-43877
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43877.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-43877
Downstream
BELL (1)
CLSA (1)
DEBIAN (1)
MGASA (2)
OESA (1)
SUSE (5)
UBUNTU (1)
Related
Published
2024-08-21T00:06:29Z
Modified
2026-10-20T10:30:22Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
media: pci: ivtv: Add check for DMA map result
Details

In the Linux kernel, the following vulnerability has been resolved:

media: pci: ivtv: Add check for DMA map result

In case DMA fails, 'dma->SG_length' is 0. This value is later used to access 'dma->SGarray[dma->SG_length - 1]', which will cause out of bounds access.

Add check to return early on invalid value. Adjust warnings accordingly.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43877.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4551236b55e80b2c1720b10b77e9400118b2339e
Fixed
38f72c7e7c6b55614f9407555fd5ce9d019b0fa4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
66c8a83bf1de2eb3eea4734c7eda22255a965f11
Fixed
81d0664bed91a858c7b50c263954b59d65f1b414
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1932dc2f4cf6ac23e48e5fcc24d21adbe35691d1
Fixed
24062aa7407091dee3e45a8e8037df437e848718
Fixed
3d8fd92939e21ff0d45100ab208f8124af79402a
Fixed
c766065e8272085ea9c436414b7ddf1f12e7787b
Fixed
629913d6d79508b166c66e07e4857e20233d85a9
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.4.301
Fixed
5.5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1b00b7335000c0e107f774cc8ee4d5340f824f28

Affected versions

v5.*
v5.4.301
v5.4.302

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43877.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.103
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.44
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43877.json"