github - ghsa-78xf-x743-mmc6

ghsa-78xf-x743-mmc6

Vulnerability from github

Published

2024-11-19 18:31

Modified

2024-11-22 21:32

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

media: s5p-jpeg: prevent buffer overflows

The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it.

While here, remove an unused word = 0 assignment.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-53061"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-191"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-11-19T18:15:25Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: s5p-jpeg: prevent buffer overflows\n\nThe current logic allows word to be less than 2. If this happens,\nthere will be buffer overflows, as reported by smatch. Add extra\nchecks to prevent it.\n\nWhile here, remove an unused word = 0 assignment.",
  "id": "GHSA-78xf-x743-mmc6",
  "modified": "2024-11-22T21:32:13Z",
  "published": "2024-11-19T18:31:07Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53061"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2024-53061

Vulnerability from cvelistv5

Published

2024-11-19 17:22

Modified

2025-02-18 16:06

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word = 0 assignment.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51
	https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b
	https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef
	https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e
	https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e
	https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd
	https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51
	https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a

Impacted products

Vendor

Product

Version

▼

Linux

Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4
Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4
Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4
Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4
Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4
Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4
Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4
Version: 6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4

Linux

Version: 4.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-53061",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-18T16:03:48.389379Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53061",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-18T16:06:14.591807Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-191",
                "description": "CWE-191 Integer Underflow (Wrap or Wraparound)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-18T16:06:55.883Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c5f6fefcda8fac8f082b6c5bf416567f4e100c51",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "a930cddfd153b5d4401df0c01effa14c831ff21e",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "c85db2d4432de4ff9d97006691ce2dcb5bda660e",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "784bc785a453eb2f8433dd62075befdfa1b2d6fd",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "c951a0859fdacf49a2298b5551a7e52b95ff6f51",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            },
            {
              "lessThan": "14a22762c3daeac59a5a534e124acbb4d7a79b3a",
              "status": "affected",
              "version": "6c96dbbc2aa9f5b4aed8792989d69eae22bf77c4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "lessThan": "4.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.324",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.286",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.230",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.172",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.117",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: s5p-jpeg: prevent buffer overflows\n\nThe current logic allows word to be less than 2. If this happens,\nthere will be buffer overflows, as reported by smatch. Add extra\nchecks to prevent it.\n\nWhile here, remove an unused word = 0 assignment."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-19T09:38:14.431Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51"
        },
        {
          "url": "https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e"
        },
        {
          "url": "https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e"
        },
        {
          "url": "https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd"
        },
        {
          "url": "https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51"
        },
        {
          "url": "https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a"
        }
      ],
      "title": "media: s5p-jpeg: prevent buffer overflows",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53061",
    "datePublished": "2024-11-19T17:22:32.189Z",
    "dateReserved": "2024-11-19T17:17:24.975Z",
    "dateUpdated": "2025-02-18T16:06:55.883Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted