| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2024120232-CVE-2024-53104-d781@gregkh> Date: Mon, 2 Dec 2024 08:29:32 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format Description =========== In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming. The Linux kernel CVE team has assigned CVE-2024-53104 to this issue. Affected and fixed versions =========================== Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 4.19.324 with commit 95edf13a48e7 Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 5.4.286 with commit 684022f81f12 Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 5.10.230 with commit faff5bbb2762 Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 5.15.172 with commit 467d84dc78c9 Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 6.1.117 with commit beced2cb09b5 Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 6.6.61 with commit 575a562f7a3e Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 6.11.8 with commit 622ad10aae5f Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 6.12.1 with commit 1ee9d9122801 Issue introduced in 2.6.26 with commit c0efd232929c and fixed in 6.13-rc1 with commit ecf2b43018da Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2024-53104 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/media/usb/uvc/uvc_driver.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/95edf13a48e75dc2cc5b0bc57bf90d6948a22fe8 https://git.kernel.org/stable/c/684022f81f128338fe3587ec967459669a1204ae https://git.kernel.org/stable/c/faff5bbb2762c44ec7426037b3000e77a11d6773 https://git.kernel.org/stable/c/467d84dc78c9abf6b217ada22b3fdba336262e29 https://git.kernel.org/stable/c/beced2cb09b58c1243733f374c560a55382003d6 https://git.kernel.org/stable/c/575a562f7a3ec2d54ff77ab6810e3fbceef2a91d https://git.kernel.org/stable/c/622ad10aae5f5e03b7927ea95f7f32812f692bb5 https://git.kernel.org/stable/c/1ee9d9122801eb688783acd07791f2906b87cb4f https://git.kernel.org/stable/c/ecf2b43018da9579842c774b7f35dbe11b5c38dd
Powered by blists - more mailing lists