CVE-2024-50287

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-tpg: prevent the risk of a division by zero

As reported by Coverity, the logic at tpg_precalculate_line() blindly rescales the buffer even when scaled_witdh is equal to zero. If this ever happens, this will cause a division by zero.

Instead, add a WARN_ON_ONCE() to trigger such cases and return without doing any precalculation.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < e3c36d0bde309f690ed1f9cd5f7e63b3a513f94aaffected
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < 0bfc6e38ee2250f0503d96f1a1de441c31d88715affected
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < 054931ca3cfcb8e8fa036e887d6f379942b02565affected
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < a749c15dccc58d9cbad9cd23bd8ab4b5fa96cf47affected
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < c63c30c9d9f2c8de34b16cd2b8400240533b914eaffected
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < 2d0f01aa602fd15a805771bdf3f4d9a9b4df7f47affected
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < 0cdb42ba0b28f548c1a4e86bb8489dba0d78fc21affected
LinuxLinux63881df94d3ecbb0deafa0b77da62ff2f32961c4 < e6a3ea83fbe15d4818d01804e904cbb0e64e543baffected
LinuxLinux3.18affected
LinuxLinux0 < 3.18unaffected
LinuxLinux4.19.324 <= 4.19.*unaffected
LinuxLinux5.4.286 <= 5.4.*unaffected
LinuxLinux5.10.230 <= 5.10.*unaffected
LinuxLinux5.15.172 <= 5.15.*unaffected
LinuxLinux6.1.117 <= 6.1.*unaffected
LinuxLinux6.6.61 <= 6.6.*unaffected
LinuxLinux6.11.8 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References