← Back

CVE-2024-43877

nvd nist
Published: Aug 21, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma->SG_length' is 0. This value is later used to access 'dma->SGarray[dma->SG_length - 1]', which will cause out of bounds access. Add check to return early on invalid value. Adjust warnings accordingly. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected (3)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 5.16 to 6.1.103
From 6.2 to 6.6.44
From 6.7 to 6.10.3

References (7)

Timeline

No history available yet.