CVE-2024-43877

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-43877
In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma->SG_length' is 0. This value is later used to access 'dma->SGarray[dma->SG_length - 1]', which will cause out of bounds access. Add check to return early on invalid value. Adjust warnings accordingly. Found by Linux Verification Center (linuxtesting.org) with SVACE.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/24062aa7407091dee3e45a8e8037df437e848718 Patch
https://git.kernel.org/stable/c/3d8fd92939e21ff0d45100ab208f8124af79402a Patch
https://git.kernel.org/stable/c/629913d6d79508b166c66e07e4857e20233d85a9 Patch
https://git.kernel.org/stable/c/c766065e8272085ea9c436414b7ddf1f12e7787b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Sep 2025, 18:37

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE CWE-125
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: medios: pci: ivtv: Agregar verificación para el resultado del mapa DMA En caso de que DMA falle, 'dma->SG_length' es 0. Este valor se usa luego para acceder a 'dma->SGarray [dma->SG_length - 1]', lo que provocará un acceso fuera de los límites. Agregue un cheque para devolver anticipadamente un valor no válido. Ajuste las advertencias en consecuencia. Encontrado por el Centro de verificación de Linux (linuxtesting.org) con SVACE.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/24062aa7407091dee3e45a8e8037df437e848718 - () https://git.kernel.org/stable/c/24062aa7407091dee3e45a8e8037df437e848718 - Patch
References () https://git.kernel.org/stable/c/3d8fd92939e21ff0d45100ab208f8124af79402a - () https://git.kernel.org/stable/c/3d8fd92939e21ff0d45100ab208f8124af79402a - Patch
References () https://git.kernel.org/stable/c/629913d6d79508b166c66e07e4857e20233d85a9 - () https://git.kernel.org/stable/c/629913d6d79508b166c66e07e4857e20233d85a9 - Patch
References () https://git.kernel.org/stable/c/c766065e8272085ea9c436414b7ddf1f12e7787b - () https://git.kernel.org/stable/c/c766065e8272085ea9c436414b7ddf1f12e7787b - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

21 Aug 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-21 01:15

Updated : 2025-09-26 18:37

NVD link : CVE-2024-43877

Mitre link : CVE-2024-43877

CVE.ORG link : CVE-2024-43877

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read