| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2024111931-CVE-2024-53061-a7a1@gregkh> Date: Tue, 19 Nov 2024 18:22:32 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows Description =========== In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word = 0 assignment. The Linux kernel CVE team has assigned CVE-2024-53061 to this issue. Affected and fixed versions =========================== Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 4.19.324 with commit c5f6fefcda8f Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 5.4.286 with commit e5117f6e7adc Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 5.10.230 with commit f54e8e1e39da Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 5.15.172 with commit a930cddfd153 Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 6.1.117 with commit c85db2d4432d Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 6.6.61 with commit 784bc785a453 Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 6.11.8 with commit c951a0859fda Issue introduced in 4.4 with commit 6c96dbbc2aa9 and fixed in 6.12 with commit 14a22762c3da Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2024-53061 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/media/platform/samsung/s5p-jpeg/jpeg-core.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/c5f6fefcda8fac8f082b6c5bf416567f4e100c51 https://git.kernel.org/stable/c/e5117f6e7adcf9fd7546cdd0edc9abe4474bc98b https://git.kernel.org/stable/c/f54e8e1e39dacccebcfb9a9a36f0552a0a97e2ef https://git.kernel.org/stable/c/a930cddfd153b5d4401df0c01effa14c831ff21e https://git.kernel.org/stable/c/c85db2d4432de4ff9d97006691ce2dcb5bda660e https://git.kernel.org/stable/c/784bc785a453eb2f8433dd62075befdfa1b2d6fd https://git.kernel.org/stable/c/c951a0859fdacf49a2298b5551a7e52b95ff6f51 https://git.kernel.org/stable/c/14a22762c3daeac59a5a534e124acbb4d7a79b3a
Powered by blists - more mailing lists